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Preface 


Intended Audience 


The intended audience for this manual is OpenVMS system managers. 


Document Structure 


The OpenVMS System Manager’s Manual: Essentials consists of the following 
chapters: 


Chapter 1, Overview of This Manual 

Chapter 2, Using OpenVMS System Management Utilities and Tools 
Chapter 3, Installing, Upgrading, and Updating Software 
Chapter 4, Starting Up and Shutting Down the System 

Chapter 5, Customizing the Operating System 

Chapter 6, Managing User Accounts 

Chapter 7, Managing Peripheral Devices 

Chapter 8, Managing Storage Media 

Chapter 9, Using Files and Directories 

Chapter 10, Using BACKUP 

Chapter 11, Security Considerations 

Chapter 12, Managing the Queue Manager and Queue Database 
Chapter 13, Managing Batch and Print Queues 


For more information about the structure of the OpenVMS System Manager’s 
Manual, see Section 1.1, Using the OpenVMS System Manager’s Manual. 


Associated Documents 


You will find the following books helpful when used in conjunction with the 
OpenVMS System Manager’s Manual: 


OpenVMS System Management Utilities Reference Manual 

OpenVMS DCL Dictionary 

OpenVMS User’s Manual 

OpenVMS Software Overview 

The current version of the Upgrade and Installation Manual for your system 
OpenVMS VAX Guide to System Security 

OpenVMS AXP Guide to System Security 


xix 


¢ Guide to OpenVMS Performance Management 
¢ VMScluster Systems for OpenVMS 


e The manuals in the networking kit of the OpenVMS Standard Documentation 
Set: 


—- DECnet for OpenVMS Guide to Networking 
— DECnet for OpenVMS Networking Manual 
— DECnet for OpenVMS Network Management Utilities 


Conventions 


XX 


In this manual, every use of OpenVMS AXP means the OpenVMS AXP operating 
system, every use of OpenVMS VAX means the OpenVMS VAX operating system, 
and every use of OpenVMS means both the OpenVMS AXP operating system and 
the OpenVMS VAX operating system. 


The contents of the display examples for certain utility commands described 
in this manual may differ slightly from the actual output provided by these 
commands on your system. However, when the behavior of a command differs 
significantly between OpenVMS VAX and OpenVMS AXP, that behavior is 
described in text and rendered, as appropriate, in separate examples. 


The following conventions are used to identify information specific to OpenVMS 
AXP or to OpenVMS VAX: 


The AXP icon denotes the beginning of information 
AXP specific to OpenVMS AXP. 


The VAX icon denotes the beginning of information 
> specific to OpenVMS VAX. 


The diamond symbol denotes the end of a section of 
4 information specific to OpenVMS AXP or to OpenVMS 
VAX. 


The following conventions are also used in this manual: 


Ctrl/x A sequence such as Ctrl/x indicates that you must hold down 
the key labeled Ctrl while you press another key or a pointing 
device button. 


PF1 x A sequence such as PF1 x indicates that you must first press 
and release the key labeled PF1, then press and release 
another key or a pointing device button. 


GOLD x A sequence such as GOLD «x indicates that you must first press 
and release the key defined GOLD, then press and release 
another key. GOLD key sequences can also have a slash (/), 
dash (-), or underscore (_) as a delimiter in EVE commands. 


In examples, a key name enclosed in a box indicates that 
you press a key on the keyboard. (In text, a key name is not 
enclosed in a box.) 


() 


CJ 


{} 


boldface text 


italic text 


UPPERCASE TEXT 


numbers 


A horizontal ellipsis in examples indicates one of the following 
possibilities: 


e Additional optional arguments in a statement have been 
omitted. 


e The preceding item or items can be repeated one or more 
times. 


e¢ Additional parameters, values, or other information can be 
entered. 


A vertical ellipsis indicates the omission of items from a code 
example or command format; the items are omitted because 
they are not important to the topic being discussed. 


In format descriptions, parentheses indicate that, if you 
choose more than one option, you must enclose the choices 
in parentheses. 


In format descriptions, brackets indicate optional elements. 
You can choose one, none, or all of the options. (Brackets 
are not optional, however, in the syntax of a directory name 
in a VMS file specification, or in the syntax of a substring 
specification in an assignment statement.) 


In format descriptions, braces surround a required choice of 
options; you must choose one of the options listed. 


Boldface text represents the introduction of a new term or the 
name of an argument, an attribute, or a reason. 


Boldface text is also used to show user input in Bookreader 
versions of the manual. 


Italic text emphasizes important information, indicates 
variables, and indicates complete titles of manuals. Italic 
text also represents information that can vary in system 
messages (for example, Internal error number), command lines 
(for example, /PRODUCER=name), and command parameters 
in text. 


Uppercase text indicates a command, the name of a routine, 
the name of a file, or the abbreviation for a system privilege. 


A hyphen in code examples indicates that additional 
arguments to the request are provided on the line that follows. 


All numbers in text are assumed to be decimal, unless 
otherwise noted. Nondecimal radixes—binary, octal, or 
hexadecimal—are explicitly indicated. 
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Overview of This Manual 


Together, the two parts of this manual explain tasks and concepts related to 
managing a system. This chapter describes this manual and how to use it. 


The OpenVMS System Manager’s Manual explains system management tasks so 
that both new and experienced system managers can perform them. However, 
before performing these tasks, you should be familiar with the following: 


¢ User-level tasks such as creating and editing files and command procedures. 
For more information, see the OpenVMS User’s Manual. 


¢ DCL commands. For more information, see the OpenVMS DCL Dictionary. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 

Using the OpenVMS System Manager’s Manual Section 1.1 
Finding information about managing complex environments Section 1.3 
Finding information about managing small systems Section 1.4 


This chapter explains the following concept: 


Concept Section 


How this manual relates to other system management documentation Section 1.2 


1.1 Using the OpenVMS System Manager’s Manual 
The OpenVMS System Manager’s Manual is made up of two parts: 
¢ This book, OpenVMS System Manager’s Manual: Essentials 


e A-second book, OpenVMS System Manager’s Manual: Tuning, Monitoring, 
and Complex Systems 


Use these two books to get step-by-step instructions for general system 
management tasks. 


The first page of each chapter in these books provides two tables to help you find 
information within the chapter 


Overview of This Manual 
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The Task Table 

The first table lists the major tasks described in the chapter. If you need to 
perform a task quickly, go directly to the section that explains that task. For 
example, in this chapter the task table lists the following tasks: 


Task Section 

Using the OpenVMS System Manager’s Manual Section 1.1 
Finding information about managing small systems Section 1.4 
Finding information about managing complex environments Section 1.3 


The Concept Table 


The second table lists the major concepts explained in the chapter. If you want 
to learn more about an underlying concept, go to the appropriate concept section. 
For example, the concept table in this chapter lists the following concept: 


Concept Section 


How this manual relates to other system management documentation Section 1.2 


1.2 How This Manual Relates to Other System Management 


Documentation 


This manual is intended to be used as a companion to other OpenVMS system 
management manuals. Figure 1-1 shows the books you should be prepared to 
use along with the OpenVMS System Manager’s Manual. 


1.3 Finding Information About Managing Complex Environments 


If you are managing large or complex configurations, you will need additional 
specialized information. Table 1—1 lists some typical environments and OpenVMS 
manuals containing specialized information for managing those environments. 


Table 1-1 Documentation for Managing Complex Environments 
Task Manual 


Networked environments DECnet for OpenVMS Guide to Networking 
DECnet for OpenVMS Networking Manual 
DECnet for OpenVMS Network Management Utilities 


VMScluster environments VMScluster Systems for OpenVMS 

tHighly available systems Building Dependable Systems: The OpenVMS VAX 
Approach 

Environments with both VAX A Comparison of System Management on OpenVMS AXP 

and AXP computers and OpenVMS VAX 

TVAX specific 
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1.4 Finding Information About Managing Small Systems 


If you are managing a small standalone system—for example, a desktop 
workstation—you probably need to perform only basic system management tasks. 


Table 1—2 lists the tasks you are likely to perform, and where to find instructions 
for performing these tasks. 
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Table 1-2 Documentation for Managing Small Standalone Systems 


Task 


Installing and upgrading the operating system 


Installing layered products 

Loading software licenses 

Booting the system 

Shutting down the system 

Using VMSTAILOR to remove files from the system disk 
Modifying site-specific startup command procedures 
Modifying login command procedures 

Setting up user accounts 

Backing up workstation disks 

Backing up and restoring the system disk 

Starting the queue manager and creating the queue database 
Setting up and starting simple queues 

Setting system parameters with AUTOGEN 

Tuning the system 


Chapter, Section, or Other 
Manual 


The Upgrade and 
Installation Manual 


Section 3.3 
Section 3.3.2 
Section 4.1.2.1 
Section 4.8.1 
Section 5.1 
Section 5.2 
Section 5.3 
Section 6.3 
Section 10.15.6 
Section 10.17 
Section 12.4 
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Using OpenVMS System Management Utilities 
and Tools 


This chapter provides general information about system management utilities 
and tools that are provided with the OpenVMS operating system. 


Procedures for using utilities and tools to perform specific tasks are provided 

in the relevant chapter of this manual. For example, this chapter generally 
describes the System Management utility (SYSMAN). Section 14.7 describes how 
to use SYSMAN to manage system parameters. Section 8.11.2 describes how to 
use SYSMAN to manage disk quotas. 


To use system management tools, you might also need to refer to the following: 


e Online help for online information about commands and qualifiers for DCL 
and system management utilities 


¢ The OpenVMS System Management Utilities Reference Manual for detailed 
information about commands and qualifiers for system management utilities 


¢ The OpenVMS DCL Dictionary for detailed information about DCL commands 
and qualifiers 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 

Logging in to the SYSTEM account Section 2.2 
Using SYSMAN to centralize system management Section 2.3 
Using OPCOM to communicate with system users Section 2.4 
Using VMSKITBLD.COM to modify a system disk Section 2.5 


This chapter explains the following concepts: 


Concept Section 
OpenVMS system management tools Section 2.1 
DCL commands for system management Section 2.1.1 
System messages Section 2.1.2 
DCL command procedures for system management Section 2.1.3 
System management utilities Section 2.1.4 
The MGRMENU.COM command procedure Section 2.1.5 
The System Management utility (SYSMAN) Section 2.3.1 
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Concept Section 

A SYSMAN management environment Section 2.3.3 
A SYSMAN profile Section 2.3.5 
The Operator Communication Manager (OPCOM) Section 2.4.1 


2.1 Understanding OpenVMS System Management Tools 


Digital supplies the following software tools to monitor and control system 
operations and resources: 


Tool For More Information 
DIGITAL Command Language (DCL) commands; for example, Section 2.1.1 

COPY and MOUNT 

System messages Section 2.1.2 
Command procedures; for example, AUTOGEN.COM and Section 2.1.3 
STARTUP.COM . 

System management utilities; for example, the Authorize utility Section 2.1.4 
(AUTHORIZE) and the Backup utility (BACKUP) 

The MGRMENU.COM command procedure Section 2.1.5 

The Operator Communication Manager (OPCOM) Section 2.4 


2.1.1 DCL Commands 


You perform many system management tasks by entering DCL (DIGITAL 
Command Language) commands. For example, you enter the DCL command 
MOUNT to make disks and tapes available to the system. Most of the DCL 
commands used by system managers require special privileges (such as OPER 
privilege). See the OpenVMS DCL Dictionary or DCL Help for the eas 
privileges and syntax for each command. 


The general format of a DCL command is as follows: 
command-namef/qualifier[,...]] [parameter|,...]] {/qualifierf,...]] 


Because a command can be continued on more than one line, the term command 
string is used to define the entire command. A command string is the complete 
specification of a command, including the command name, command qualifiers, 
parameters, and parameter qualifiers. 


For complete descriptions of each DCL command, see the online DCL help or the 
OpenVMS DCL Dictionary. If you are not familiar with DCL command syntax, 
see the OpenVMS User’s Manual. 


2.1.2 System Messages 
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When you enter commands in DCL or in utilities, the system returns messages 
to help you understand the result of each command. System messages can 
indicate the following: 


e Successful completion of a command 
e Information about the effect of the command 


e Warning about the effect of the command 
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e Failure to successfully complete the command 


At times, you might need to interpret a system message—for example, to find 
out how to recover from a warning or failure. The Help Message utility (Help 
Message) allows you and system users to quickly access online descriptions 

of system messages from the DCL prompt. For more information about Help 
Message, see the OpenVMS System Messages: Companion Guide for Help 
Message Users. In addition, the OpenVMS System Messages and Recovery 
Procedures Reference Manual provides detailed descriptions of system messages. 


2.1.3 DCL Command Procedures 


You can use command procedures to efficiently perform routine tasks. A 
command procedure is a file containing DCL commands and, optionally, 

data used by those DCL commands. When you execute a command procedure, 
the system reads the file and executes the commands it contains. This eliminates 
the need for you to enter each command interactively. You can create command 
procedures to automate some of the routine system management tasks specific to 
your site. 


A simple command procedure can contain a sequence of commands that you use 
frequently. For example, you could include the following commands in a command 
procedure called GO_WORK.COM: 


$ SET DEFAULT [PERRY.WORK] 
$ DIRECTORY 
$ EXIT 


When you execute this command procedure with the command @GO_WORK, you 
set your default directory to [PERRY.WORK] and display a list of files in that 
directory. 7 


With complex command procedures, you can use DCL instead of a high-level 
programming language. For more information on creating command procedures, 
see the OpenVMS User’s Manual. 


Executing Command Procedures in Batch Mode 

You can execute command procedures in batch mode by submitting the 
procedure to a batch queue. When resources are available, the system creates 
a batch process to execute the commands in the procedure. Usually, processes 
running in batch mode execute at a lower process priority to avoid competing 
with interactive users for system resources. 


You might execute a command procedure in batch mode for the following reasons: 
¢ To automate a task 


¢ To process work at a lower scheduling priority, so as not to compete with 
interactive users for system resources 


¢ To perform a task during off hours, such as at night or on weekends 


A batch-oriented command procedure can include a command to resubmit itself to 
a batch queue, thereby repetitively performing the task with no user intervention. 
For example, you might create a batch-oriented command procedure to run the 
Analyze/Disk_Structure utility to report disk errors. If you include a command to 
resubmit the procedure to a batch queue, the procedure will automatically execute 
when scheduled, unless errors cause the procedure to fail. The following is a 
simple example of this kind of command procedure, named SYSTEM-DAILY.COM: 
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$ SET NOON 


$! Resubmit this procedure to run again tomorrow. 


$! 


SYSSMANAGER: SYSTEM-DAILY.COM; 
$! 
$! Purge the log files 


$ PURGE/KEEP=7 SYSSMANAGER: SYSTEM-DAILY .LOG 


$! 
$! Analyze public disks 
$! 


$ SUBMIT/KEEP/NOPRINT/QUEUE=SYSSBATCH/AFTER="TOMORROW+1:00"/USER=SYSTEM - 


$ ANALYZE/DISK/LIST=SYSSMANAGER:WORK1.LIS; WORK1: 
$ ANALYZE/DISK/LIST=SYSS$MANAGER:WORK2.LIS; WORK2: 


$! 
$! Print listings 
$! 


$ EXIT 


$ PRINT/QUEUE=SYS$PRINT SYSSMANAGER:WORK1.LIS; , SYSSMANAGER:WORK2.LIS; 


Digital-Supplied Command Procedures for System Management 


Digital provides several command procedures that you can use when managing a 
system. Table 2—1 lists some commonly used command procedures. 


Table 2-1 System Management Command Procedures 


Command Procedure 


SYS$SYSTEM:STARTUP.COM 


SYS$STARTUP:SYSTARTUP_VMS.COM 


SYS$SYSTEM:SHUTDOWN.COM 


SYS$UPDATE:AUTOGEN.COM 


SYS$UPDATE:VMSINSTAL.COM 


2.1.4 System Management Utilities 


With the operating system, Digital supplies a number of system management 
utilities to help perform system management tasks. A system management 
utility is a program that performs a set of related operations. For example, you 
use the Mount utility (MOUNT) to make disks and tapes available to the system, 
and you use the Backup utility (BACKUP) to save and restore files. 
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Function 


The system uses this command 
procedure to automatically perform 
certain tasks that are required to 
start up an OpenVMS system. This 
procedure is executed when the system 
boots. Do not modify this command 
procedure. 


STARTUP.COM executes this procedure 
when the system boots. Add commands 
to this procedure to perform site-specific 
tasks each time the system boots. 


Use to shut down the system in an 
orderly fashion. 


Use to automatically set system 
parameters and page, swap, and dump 
file sizes to values appropriate for the 
system configuration and work load. 


Use to install software on a running 
system. 


Most system management utilities require special privileges. Generally, you run 
these utilities from the SYSTEM account, which has all privileges by default. 
Section 2.2 describes logging in to the SYSTEM account. 
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You invoke most utilities using the following command format: 
RUN SYS$SYSTEM:utility_name 


To invoke other utilities, such as MOUNT and ANALYZE/DISK_STRUCTURE, 
you enter a DCL command. For example: 


$ ANALYZE/DISK STRUCTURE 


For information on invoking utilities and the commands you can use in these 
utilities, see the OpenVMS System Management Utilities Reference Manual. 


Table 2—2 lists the system management utilities and their purposes. This manual 
describes how to use most of these utilities. For detailed information on utility 
commands and qualifiers, see the OpenVMS System Management Utilities 


Reference Manual. 


Table 2-2 System Management Utilities 


Utility Name 


Accounting utility (ACCOUNTING) 
ACL editor (access control list editor) 
Analyze/Disk_Structure utility 
(ANALYZE/DISK_STRUCTURE) 


Audit Analysis utility (ANALYZE 
/AUDIT) 


Authorize utility (AUTHORIZE) 


Backup utility (BACKUP) 

Bad Block Locator utility (BAD) 
*Crash Logger Utility Extractor 
(CLUE) 

Error Log utility (ERROR LOG) 
Exchange utility (EXCHANGE) 
Help Message utility (Help Message) 
Install utility (INSTALL) 


LAT Control Program utility (LATCP) 


Local Area Disk Control Program 
utility (LADCP) 


+VAX specific 


Purpose 


To produce reports of resource use. 
To create and maintain ACLs. 


To check the validity of Files—11 Structure Level 1 and Structure 
Level 2 disk volumes, and to report errors and inconsistencies. 
Also used to repair these inconsistencies. 


To produce reports and summaries of security events from the 
system security audit log file. Use this utility to interpret the 
large amounts of auditing information that the system may 
generate. 


To add and modify records in the existing user authorization and 
network authorization files, or to create new files. Also used to 
add and modify records in the rights database. 


To copy or save files and disk volumes. Also used to restore saved 
files and volumes. 


To analyze block-addressable devices and record the location of 
blocks that cannot reliably store data. 


On VAX systems, to obtain information about crash dumps. 


To report the contents of a system error log file. 


To transfer data to and from mass storage volumes that are 
written in formats other than standard formats recognized by the 
operating system. 


To quickly access information about system messages returned 
by DCL commands. 
To improve performance or enhance privileges of images. 


To set up and control the LAT software on OpenVMS host 
systems. LAT software allows you to connect terminals and 
printers to multiple remote systems. 


On VAX systems, to set up and control the local area disk (LAD) 
software on OpenVMS host systems. Use LAD software with 
InfoServer systems. 


(continued on next page) 
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Table 2-2 (Cont.) System Management Utilities 


Utility Name Purpose 

Log Manager Control Program utility To create and manage the transaction logs used by DECdtm 
(LMCP) services. 

Monitor utility (MONITOR) To monitor systemwide performance. 

Mount utility (MOUNT) . To make a disk or magnetic tape volume available for processing. 
Network Control Program (NCP) To set up, control, monitor, and test a DECnet network. 
Operator Communication Manager To communicate messages. 

(OPCOM) 


System Generation utility (SYSGEN) To create and install page, swap, and dump files and to manage 


system parameters. 
+On VAX systems, to load and connect device drivers. 


System Management utility (SYSMAN) To centralize system management. Allows you to perform system 


management tasks simultaneously on one or more nodes. 
£On AXP systems, to load and connect device drivers. 


VAX specific 
tAXP specific 
This manual does not describe the following utilities in detail: 

Utility For More Information 

Bad Block Locator utility (BAD) OpenVMS Bad Block Locator Utility Manual 
online help 

Exchange utility (EXCHANGE) OpenVMS Exchange Utility Manual 
online help 

LASTCP (LASTCP) and LADCP utilities (LADCP) InfoServer Client for OpenVMS LASTCP and 
LADCP Utilities Manual 

Network Control Program utility (NCP) DECnet for OpenVMS Network Management 


Utilities 
online help 


2.1.5 The MGRMENU.COM Procedure 


2-6 


To help you perform basic system management tasks, Digital provides a command 
procedure named SYS$EXAMPLES:MGRMENU.COM. This procedure displays a 
menu that you can use to perform the following tasks: 


e Add a user account 
e Build a standalone BACKUP kit 
e Shut down your system 


You can use this command procedure as is, or modify it to serve your own site- 
specific needs. If you modify this procedure, Digital recommends you first copy 
the procedure to another directory (for example, SYS$MANAGER), so that an 
original version of MGRMENU.COM is always available in the SYS$SEXAMPLES 
directory. 
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To see and use the menu, enter the following command: 


$ @SYSSEXAMPLES : MGRMENU 


2.2 Logging In to the SYSTEM Account 


To use system management utilities and perform system management functions, 
log in to the system manager’s account (SYSTEM). 


Caution 


Digital recommends that you change the password for the SYSTEM 
account frequently to maintain system security. Because the SYSTEM 
account has full privileges by default, exercise caution when using it. 


If your site has strong security requirements, you should disable 
interactive use of the SYSTEM account and set up separate privileged 
accounts for individuals who must perform privileged activities on the 
system. This will allow you to more closely account for privileged activity 
on the system. 


How To Perform This Task 
1. Press the Return key on the console terminal. 
2. In response to the system’s request for your username, enter SYSTEM. 


3. In response to the system’s request for your password, enter the password 
that you chose for the SYSTEM account when you installed or upgraded the 
operating system, or the current password if you changed it since then. 


4. After you enter your password, the system prints a welcome message on the 
console terminal. If you have logged in previously, the system also prints the 
time of your last login. When the dollar sign ($) prompt appears, login is 
complete and you can enter commands. 


Example 


E> On VAX systems: 


Username: SYSTEM 
Password: 


Welcome to OpenVMS VAX Version n.n on node x 


Last interactive login on Thursday, 20-FEB-1994 16:41 
Last non-interactive login on Friday, 21-FEB-1994 17:06 


On AXP systems: 


Username: SYSTEM 
Password: 
Welcome to OpenVMS AXP (TM) Operating System, Version n.n on node x 
Last interactive login on Thursday, 20-FEB-1994 16:41 
Last non-interactive login on Friday, 21-FEB-1994 17:06 
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2.3 Using the System Management Utility (SYSMAN) to Centralize 


System Management 


If you manage more than one computer, you can use the System Management 
utility to centralize system management. 


The following table lists some major SYSMAN features and points to sections in 
this chapter that contain more information. 


For More 
Feature Information 
Enable a system to execute SYSMAN commands from remote nodes Section 2.3.2 
Define your SYSMAN management environment Section 2.3.4 
Adjust your SYSMAN profile to set privileges, default device and Section 2.3.6 
directory, and DCL verification 
Execute DCL commands from SYSMAN Section 2.3.8 
Create SYSMAN command procedures Section 2.3.9 
Set up SYSMAN with an initialization file Section 2.3.10 


2.3.1 Understanding SYSMAN 
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The System Management utility (SYSMAN) centralizes system management, 

so that you can manage nodes or VMSclusters from one location. Rather than 
logging in to individual nodes and repeating a set of management tasks, SYSMAN 
enables you to define your management environment to be a particular node, a 
group of nodes, or a VMScluster environment. With a management environment 
defined, you can perform traditional system management tasks from your local 
node; SYSMAN executes these tasks on all nodes in the target environment. 


You need OPER and TMPMBx privileges to run SYSMAN. 


SYSMAN uses many of the same software tools that you traditionally use 

to manage a system. It can process most DCL commands, such as MOUNT 
and INITIALIZE. It can also execute many system management utilities and 
command procedures, such as AUTHORIZE and AUTOGEN. 


SYSMAN also includes its own commands that let you perform the following 
tasks: 


For More 
Command Task Information 
ALF (automatic login Associate a terminal or port with a user _ Section 6.13.1 
facility) name 
CONFIGURATION Inspect or modify VMScluster Section 19.4 
parameters 
DISKQUOTA Control and monitor disk usage Section 8.11.2 
tIO Control and display the I/O configuration Section 7.4.2 
of an AXP system 
LICENSE Load and unload licenses Section 3.3.2 
PARAMETERS Inspect and modify system parameters Section 14.7 
£AXP specific 
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For More 
Command Task Information 


STARTUP Customize startup databases by Section 5.4 
inspecting and modifying software 
startup components 


2.3.2 Enabling a Remote System to Execute SYSMAN Commands 


The SMISERVER process must be running on a remote node for SYSMAN 
commands to execute on that node. SMISERVER is the detached process 
responsible for executing SYSMAN commands on remote nodes. 


Any node that is part of a VMScluster normally starts the SMISERVER process 
in the system startup procedure SYS$SYSTEM:STARTUP.COM. (The system 
parameter CLUSTER on the node must have a value of 1 or more.) 


To start the SMISERVER process on a workstation that is not part of a 
VMScluster, include the following command line in the site-specific startup 
command procedure SYSTARTUP_VMS.COM: 


$ @SYSSSYSTEM:STARTUP SMISERVER 
For more information about SYSTARTUP_VMS.COM, see Section 5.2.7. 


You can also enter this command interactively to restart the SMISERVER process 
without rebooting the system. 


2.3.3 Understanding a SYSMAN Management Environment 


When you use SYSMAN, it is important to define the management environment 
you will be working in. The management environment is the node or nodes on 
which subsequent commands will execute. 


By default, the management environment is the local node (the node from which 
you execute SYSMAN). To execute commands on one or more other nodes, you 
can redefine the management environment to be any of the following: 


e Your own VMScluster 

e A subset of nodes in your VMScluster 

¢ A nonclustered node available through DECnet for OpenVMS 
e Another VMScluster 

¢ A subset of nodes in another VMScluster 

e Any group of individual nodes 


Refer to Figure 2—1 during the following discussion of management 
environments. 
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Figure 2-1 Sample SYSMAN Management Environment 


Cluster 1 Cluster 2 
NODE21 NODE22 NODE23 NODE26 NODE27 NODE24 NODE25 
1 | 1 | | | | | | ] 1 | 1 | 
UL Se I | | | | eee 
| | 1 | | 





Legend: 


== The DECnet Interconnect 


| 
DECnet Connections 


-—— Cluster Boundaries ZK-6617-GE 


You can use NODE21 as the management environment, or you can define the 
environment to be any node, group of nodes, or VMScluster shown in Figure 2-1. 


If you execute SYSMAN from NODE21, then NODE21 is the local node; it is the 
management environment when SYSMAN starts. All other nodes are remote 
nodes. 


2.3.4 Defining the SYSMAN Management Environment 


To define the management environment, use the SYSMAN command SET 
ENVIRONMENT. Whenever you redefine an environment, SYSMAN displays the 


new context. You can always verify the current environment with the command 
SHOW ENVIRONMENT. 


When you are not working on your local node or within your own cluster, your 
environment is a nonlocal environment. SYSMAN makes this distinction 
for security reasons; when you are defining a nonlocal environment, such as a 
different VMScluster, SYSMAN prompts for a password. SYSMAN also prompts 
for a password when you attempt to manage a system under a different user 
name. You can change your user name by including the (USERNAME qualifier 
on the SET ENVIRONMENT command. 


A SYSMAN environment remains in effect until you change it or exit from 
SYSMAN. 
2.3.4.1 Defining Another Node as the Environment 


You can define a management environment to be any node available through 


DECnet. To define one or more nodes to be your management environment, use 
the SET ENVIRONMENT/NODE command. For example, the following SET 
ENVIRONMENT command defines the management environment to be NODE22: 
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$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> SET ENVIRONMENT/NODE=NODE22 
$SYSMAN-I-ENV, current command environment: 
Individual nodes: NODE22 
Username ALEXIS will be used on nonlocal nodes 


The following command defines the management environment to be a group of 
nodes — NODE23, NODE24, and NODE25: 


SYSMAN> SET ENVIRONMENT /NODE=(NODE23,NODE24,NODE25) 
Remote Password: 


$SYSMAN-I-ENV, Current Command Environment: 
Individual nodes: NODE23,NODE24,NODE25 
At least one node is not in local cluster 
Username ALEXIS will be used on nonlocal nodes 


2.3.4.2 Using Logical Names to Organize Management Environments 
If you want to organize the nodes in your VMScluster according to specific 
categories (for example, all ClI-based nodes or all nodes with C installed), you can 
define logical names to use with the SET ENVIRONMENT/NODE command, as 
follows: 


1. Create the logical name table SYSMAN$NODE_TABLE by putting the 
following command into the file SYS$MANAGER:SYLOGICALS.COM, which 
is executed during system startup: 


$ CREATE/NAME TABLE/PARENT=LNM$SYSTEM DIRECTORY SYSMANSNODE TABLE 


2. Define one or more logical names to be a node or list of nodes by putting a 
command similar to the following into SYS$SMANAGER:SYLOGICALS.COM: 


$ DEFINE CI_NODES NODE21,NODE22 , NODE23/TABLE=SYSMANSNODE_TABLE 


3. When you set your SYSMAN environment from the DCL level, specify one of 
the logical names you created for this purpose. For example: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> SET ENVIRONMENT/NODE=(CI_NODES) 


Remote Password: 


$SYSMAN-I-ENV, current command environment: 
Individual nodes: NODE21,NODE22,NODE23 
At least one node is not in the local cluster. 
Username SYSTEM will be used on nonlocal nodes. 


You can also define logical names for VAX and AXP nodes in a dual-architecture 
VMScluster, as explained in Section 19.5. 


Example 


The following example demonstrates how you can define multiple logical names 
to organize several management environments: 


$ CREATE/NAME TABLE/PARENT=LNMS$SYSTEM DIRECTORY SYSMANSNODE TABLE 
$ DEFINE CI_NODES SYS2,SYS8/TABLE=SYSMANSNODE_ TABLE 

$ DEFINE C NODE21,NODE22 ,NODE23/TABLE=SYSMANSNODE_ TABLE 

$ DEFINE PASCAL NODE23,NODE18,CI_NODES/TABLE=SYSMANSNODE TABLE 

$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> SET ENVIRONMENT/NODE=(C, PASCAL) 

Remote Password: 


$SYSMAN-I-ENV, current command environment: 
Individual nodes: NODE21,NODE22,NODE23,NODE18,SYS2,SYS8 
At least one node is not in the local cluster. 
Username SYSTEM will be used on nonlocal nodes. 
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2.3.4.3 Defining a VMScluster Environment 


To define your management environment to be a VMScluster, use the SET 
ENVIRONMENT/CLUSTER command. 


In SYSMAN, VMScluster environments can be one of two types: 


VMScluster Environment Definition 

Local VMScluster from which you are using SYSMAN 

Nonlocal Any VMScluster other than the one from which you are 
executing SYSMAN 


To expand the management environment in Figure 2—1 from NODE21 to Cluster 
1, enter the following command from NODE21: 


SYSMAN> SET ENVIRONMENT/CLUSTER 
$SYSMAN-I-ENV, Current Command Environment: 
Clusterwide on local cluster 
Username ALEXIS will be used on nonlocal nodes 


In the VMScluster environment shown in Figure 2-1, SYSMAN executes 
commands on all nodes in Cluster 1, namely NODE21, NODE22, and NODE23. 


To manage a nonlocal VMScluster with SYSMAN, use the /NODE qualifier to 
identify the cluster. If you define a VMScluster alias, the /NODE qualifier can 
use the alias rather than the node name. 


If you use the /CLUSTER and /NODE qualifiers together, the environment 
becomes the VMScluster where the given node is a member. For example, 

to perform management tasks on Cluster 2 in Figure 2-1, enter the SET 
ENVIRONMENT command with the /CLUSTER qualifier and name one node 
within Cluster 2 using the /NODE qualifier: 


SYSMAN> SET ENVIRONMENT/CLUSTER/NODE=NODE24 
Remote Password: 


SSYSMAN-I-ENV, Current Command Environment: 
Clusterwide on remote node NODE24 
Username ALEXIS will be used on nonlocal nodes 


For information about using SYSMAN to manage a VMScluster that contains 
both AXP and VAX nodes, see Section 19.5. 


2.3.5 Understanding Your SYSMAN Profile 
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When you use SYSMAN across VMSclusters, SYSMAN establishes a profile 
that contains your rights, privileges, and defaults, and verifies that you are an 
authorized user. If you encounter privilege problems when using SYSMAN, it 
helps to know how SYSMAN determines your profile. 


SYSMAN looks for three possible scenarios when determining your profile: 


e If the environment is a VMScluster that has common SYSUAF and 
RIGHTSLIST databases, SYSMAN assigns the profile in effect on the local 
node to the SMISERVER process on the target node(s). This profile includes 
both authorized and current privileges. 


e Ifthe environment is a VMScluster and does not have common SYSUAF and 
RIGHTSLIST databases, SYSMAN checks the SYSUAF on the target node(s) 
to see if you are an authorized user. If you are, SYSMAN copies your profile 
from the SYSUAF on the target node(s) to the SMISERVER process on the 
target node(s). 
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e Ifthe environment has nodes that are not part of your local VMScluster, 
or if you have recently changed your user name, SYSMAN prompts for a 
password before it checks the SYSUAF on the target node. If you enter the 
correct password and the SYSUAF shows that you are an authorized user, 
SYSMAN copies your profile from the SYSUAF on the target node(s) to the 
SMISERVER process on the target node(s). 


The profile does not include symbolic names, logical names, preset terminal 
characteristics, or key definitions established through a login command procedure. 
The only environment that has the attributes defined in a login command 
procedure is the local node from which you are executing SYSMAN. 


2.3.6 Adjusting Your SYSMAN Profile 


Use the SYSMAN command SET PROFILE to change your SYSMAN 
management profile. The qualifiers /PRIVILEGES, /DEFAULT, and /VERIFY 
enable you to change the following attributes of the SMISERVER process: 


Attribute Qualifier For More Information 
Current privileges /PRIVILEGES Section 2.3.6.1 
Default device and directory /DEFAULT Section 2.3.6.2 

DCL verification of DO /VERIFY Section 2.3.7 
commands 


This profile is in effect until you change it with the SET PROFILE command, 
reset the environment (which may change your profile automatically), or exit from 
SYSMAN. | 


The SET PROFILE command temporarily changes the attributes of your current 
local process. However, when you exit from SYSMAN, all attributes are restored 
to the values that were current when SYSMAN was invoked. 


2.3.6.1 Changing Your Current Privileges | 
The SYSMAN command SET PROFILE/PRIVILEGES temporarily changes your 
current privileges in an environment. 


Frequently, system management commands require special privileges. You might 
need to add privileges before you execute certain commands in an environment. 
System managers usually have the same privileges on all nodes; if you do not 
have the required privileges on a node, SYSMAN cannot execute the command 
and returns an error message. 


Example 
The following example makes SYSPRV one of your current privileges: 


SYSMAN> SET PROFILE/PRIVILEGES=SYSPRV 
SYSMAN> SHOW PROFILE 
$SYSMAN-I-DEFDIR, Default directory on node NODE21 -- WORK1:[MAEW] 
SSYSMAN-I-DEFPRIV, Process privileges on node NODE21 -- 
TMPMBX 
OPER 
NETMBX 
SYSPRV 
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2.3.6.2 Changing Your Default Device and Directory 


Use the SET PROFILE/DEFAULT command to reset the default device 
and directory specification for your process and all server processes in the 
environment. 


Most often, the default device and directory specified in your UAF record is a 
first-level directory in which you create and maintain files and subdirectories. 
SYSMAN uses this default device and directory name when resolving file 
specifications. It also assigns the default device and directory name to any 
files that you create during a session. 


In some cases, you might need to change the default device and directory in your 
SYSMAN profile. For example, you might have a directory containing command 
procedures as well as some system management utilities that require the default 
directory to be SYS$SYSTEM. 


Example 
The following example sets the default device and directory to 
DMA1:[SMITH.COM}]: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> SET PROFILE/DEFAULT=DMA1 : [SMITH.COM] 


2.3.7 Setting DCL Verification 


Using the SET PROFILE/VERIFY command, you can turn on DCL verification, 
which displays DCL command lines and data lines as they execute. 


SYSMAN can execute DCL commands using the DO command. By default, 
SYSMAN DCL verification is turned off. 


Example 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> SET PROFILE/VERIFY 


2.3.8 Executing DCL Commands from SYSMAN 
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The SYSMAN command DO executes DCL commands, command procedures, 

and SYSMAN commands on all nodes in a VMScluster environment. In 
VMSclusters or in any environment with multiple nodes, you enter a set of 
commands once, and SYSMAN executes the commands sequentially on every 
node in the environment. SYSMAN displays the name of each node as it executes 
commands, or an error message if the command fails. 


If a node does not respond within a given timeout period, SYSMAN displays a 
message before proceeding to the next node in the environment. You can specify 
a timeout period with the SET TIMEOUT command. 


Each DO command executes as an independent subprocess, so there is no process 
context retained between DO commands. For this reason, you must express all 
DCL commands in a single command string, and you cannot run a procedure that 
requires input. 


In a VMScluster environment, SYSMAN executes DO commands sequentially 
on all nodes in the VMScluster. After a command completes or times out on one 
node, SYSMAN sends it to the next node in the environment. Any node that is 
unable to execute a command returns an error message. 


For more information about using the DO command to manage a VMScluster, see 
Section 19.5. You can also refer to the OpenVMS System Management Utilities 
Reference Manual for a complete description of the DO command. 


Using OpenVMS System Management Utilities and Tools 
2.3 Using the System Management Utility (SYSMAN) to Centralize System Management 


Example 

In the following example, SYSMAN runs the Install utility and makes a file 
known on all nodes in the VMScluster when you enter the commands from the 
local node: 


$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> SET ENVIRONMENT/CLUSTER 

SYSMAN> SET PROFILE/PRIVILEGE=CMKRNL 

SYSMAN> DO INSTALL ADD/OPEN/SHARED WORK4: [CENTRAL ]STATSHR 


$SYSMAN-I-OUTPUT, Command execution on node NODE21 
SSYSMAN-I-OUTPUT, Command execution on node NODE22 


2.3.9 Creating SYSMAN Command Procedures 


The SYSMAN command @ executes SYSMAN command procedures on each node 
in the environment. 


Example 


The following example creates and executes a SYSMAN command procedure to 
display the current date and system time for each VMScluster node: 


$ CREATE TIME.COM 
SET ENVIRONMENT/CLUSTER 
CONFIGURATION SHOW TIME [cin] 
$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> @TIME 
$SYSMAN-I-ENV, Current command environment: 
Clusterwide on local cluster 
Username SYSTEM will be used on nonlocal nodes 


System time on node NODE21: 19-JUN-1994 13:32:19.45 
System time on node NODE22: 19-JUN-1994 13:32:27.79 
System time on node NODE23: 19-JUN-1994 13:32:58.66 
SYSMAN> 


2.3.10 Setting Up SYSMAN with an Initialization File 


You can create an initialization file that is used each time you invoke SYSMAN. 
In the initialization file, you can perform tasks such as defining keys and setting 
up your environment. 


The default file specification for the SYSMAN initialization file is 
SYS$LOGIN:SYSMANINLINI. If you want your SYSMAN initialization file to 
have a different file specification, you must define the logical name SYSMANINI 
to point to the location of the file. The following is a sample initialization file that 
defines several keys: 


$ TYPE SYSMANINI.INI 

DEFINE/KEY/TERMINATE KPO "SET ENVIRONMENT/CLUSTER/NODE=(NODE21,NODE22)" 
DEFINE/KEY/TERMINATE KP1 "CONFIGURATION SHOW TIME" 

DEFINE/KEY/TERMINATE KP2 "SHOW PROFILE" 
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2.4 Using OPCOM to Communicate with System Users 


The Operator Communication Manager (OPCOM) is a tool for communicating 
with users and operators on the system. OPCOM allows you to perform the 
following functions. 


Function For More Information 
To broadcast messages to users who are logged in Section 2.4.3 

To designate terminals as operator terminals, enabling Section 2.4.4 

them to display messages broadcast by OPCOM 

To record messages broadcast by OPCOM in a log file Section 17.5.3 

To send requests to an operator! Section 2.4.5 

To reply to operator requests! Section 2.4.6 


1These functions are used in sites where operators are assigned to help users mount disk or tape 
volumes and printer forms 


2.4.1 Understanding the Operator Communication Manager (OPCOM) 
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Figure 2—2 illustrates the function of OPCOM. 
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Figure 2-2 The Operator Communication Manager (OPCOM) 
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OPCOM uses the following components: 


Component 


The OPCOM process 


Operator terminals 


The operator log file 


OPCOM messages 


REPLY and REQUEST 
commands 


Description 


The system process that manages OPCOM 
operations. Unless you disable it, the OPCOM 
process automatically starts at system startup 
time. (On small workstations, the OPCOM process 
is disabled.) 


Terminals designated to display messages 
broadcast by OPCOM. Usually, the console 
terminal (with the device name OPA0:) is the 
operator terminal. However, you can designate any 
user terminal as an operator terminal. 


A file that records messages broadcast 
by OPCOM. The file is named 
SYS$MANAGER:OPERATOR.LOG. 


Messages broadcast by OPCOM. These messages 
are displayed on operator terminals and written 
to the operator log file. The messages might be 
general messages sent by you, user requests, 
operator replies, or system events. 


DCL commands that allow you to use and control 
OPCOM. 


OPCOM Defaults 
OPCOM uses the following defaults: 


¢ OPCOM is started by default (except on workstations where OPCOM startup 
is disabled by default). 


e Except for workstations in a VMScluster environment, OPAO is enabled as 
an operator terminal, and the log file SYS$MANAGER:OPERATOR.LOG is 
opened. All OPCOM classes are enabled. 

OPCOM Requirements 

OPCOM has the following requirements: 


For More Information 


Section 2.4.2 


Section 2.4.4 


Section 17.5 


Section 17.5.2 


Section 2.4.3, 
Section 2.4.5, and 
Section 2.4.6 


¢ In order to execute any OPCOM commands, OPCOM must be running and 
OPCOM commands must be entered from a terminal device designated as an 
operator terminal. 


¢ OPCOM commands require at least OPER privilege. SHARE privilege is also 
needed if another process is logged in to the designated operator terminal, 
and SECURITY privilege is needed to enable or disable the security class. 


¢ In order to designate an operator terminal in batch or SYSTARTUP, 
SYS$COMMAND must be assigned to a valid terminal device. 


2.4.2 Starting OPCOM 


The OPCOM process must be running to execute OPCOM commands. The 
OPCOM process starts automatically during system startup, unless it is disabled 
(startup is disabled on workstations). You might need to start OPCOM in the 
following instances: 


e Ifyou want to run OPCOM on a workstation 
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¢ Ifa software problem causes the process to fail and also prevents OPCOM 
from restarting automatically 

Starting OPCOM on a Workstation 

To start OPCOM interactively, enter the following command: 


$ @SYSSSYSTEM:STARTUP OPCOM 


To start OPCOM each time the system boots, edit the site-specific startup 
command procedure SYS$MANAGER:SYSTARTUP_VMS.COM to remove 
the comment delimiter (!) from this command line. For more information on 
modifying SYSTARTUP_VMS.COM, see Section 5.2.7. 


Restarting OPCOM 


If a software problem causes the process to fail, OPCOM attempts to restart 
itself. However, if a software problem prevents OPCOM from restarting, you can 
manually restart the process by entering the following command from the system 
manager’s account (SYSTEM): 


$ @SYSSSYSTEM:STARTUP OPCOM 


If a software problem causes OPCOM to fail, submit a software problem report 
(SPR) to report the problem to Digital. Include the process dump file named 
SYS$SYSTEM:OPCOM.DMP. When OPCOM fails, it creates this file to allow 
Digital representatives to determine the cause of the failure. 


2.4.3 Sending Messages to Users 


To broadcast a message to users, enter the REPLY command as follows: 
REPLY [/qualifier...] ["message-text"] 

For example: 

$§ REPLY/ALL/BELL "Please log off" 


Use the following qualifiers to control OPCOM messages: 


Qualifier Description 


/ALL Broadcasts a message to all terminals that are 
attached to the system or VMScluster. These 
terminals must be turned on and have broadcast- 
message reception enabled. 


/BELL Rings a bell at the terminal receiving a message 
when entered with the /ALL, the /TERMINAL, or 
the /USERNAME qualifier; two bells when entered 
with the /URGENT qualifier; and three bells when 
entered with the /SHUTDOWN qualifier. 


/NODE[=(node-namef[....]) Broadcasts a message to the local node only, or to a 
node or nodes you specify. 
/SHUTDOWN Sends a message beginning “SHUTDOWN...” if 


used with the /BELL qualifier, rings three bells at 
terminals receiving the message. 


/TERMINAL=(terminal-name[,..]) Broadcasts the message to the specified terminals. 


/URGENT Broadcasts a message beginning “URGENT...”; if 
used with the /BELL qualifier, rings two bells at 
terminals receiving the message. 
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Qualifier Description 


/USERNAME=(usernamef[....]) Broadcasts a message to all terminals at which users 
are logged in to the system (or VMScluster), or only 
to the terminals of the specified users. 


For more information, see the OpenVMS DCL Dictionary. 


Examples 


The REPLY command in the following example sends a message to all users 
logged in to node WLDWND. When the message is displayed, a bell rings at the 
terminal. 


$ REPLY/ALL/BELL/NODE=WLDWND "Please log off" 


The REPLY command in the following example sends a message to the user 
logged in at terminal TTC1. When the message is displayed, a bell rings at that 
terminal. 


$ REPLY/BELL/TERMINAL=TTC1: "Your file has completed printing" 


2.4.4 Designating Operator Terminals 
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Normally, the console terminal (with the device name OPAO:) is automatically 
an operator terminal. However, you can designate any terminal as an operator 
terminal. You can also disable a previously designated operator terminal. 
Enabling Operator Terminals 

To designate a terminal as an operator terminal, enter the REPLY/ENABLE 
command at the terminal. For example: 


$ REPLY/ENABLE 
$ 


$3$3%$3%S3%% ~ OPCOM 13-JUL-1993 11:30:30.56 %%3%%%3%3%%3%% 
Operator BHAKS$FTA20: has been enabled, username SYSTEM 


The REPLY/ENABLE command requires OPER privilege. 


To designate an operator’s terminal in batch or in startup command procedures, 
SYS$COMMAND must be assigned to a valid terminal device. 


If your facility is very large, there may be several operators, each of whom 

is assigned to specific tasks. If this is the case, you can specify the classes of 
messages the operator terminal receives and responds to when you enable the 
operator terminal, as follows: 


REPLY/ENABLE=(classj....]) 


The following table describes each class of messages: 


Class Description 

CARDS Displays messages sent to the card readers. 

CENTRAL Displays messages sent to the central system operator. 

CLUSTER Displays messages from the connection manager pertaining to 
VMScluster state changes. 

DEVICES Displays messages pertaining to mounting disks. 

LICENSE Displays messages pertaining to licenses. 


Using OpenVMS System Management Utilities and Tools 
2.4 Using OPCOM to Communicate with System Users 


Class Description 


NETWORK Displays messages pertaining to networks; the keyword 
CENTRAL must also be specified to inhibit network messages. 


OPER1 to OPER12 Displays messages sent to operators identified as OPER1 to 


OPER12. 

PRINTER Displays messages pertaining to print requests. 

SECURITY Allows messages pertaining to security events; requires 
SECURITY privilege. 

TAPES Allows messages pertaining to mounting and dismounting tape 
volumes. 


For example: 
$ REPLY/ENABLE=(PRINTER, OPER3) 


Disabling Operator Terminals 


A terminal that you designate as an operator’s terminal remains enabled even 
when the operator logs out. To return the terminal to normal (nonoperator) 
status, enter the REPLY/DISABLE command from the terminal. 


Example 


The following example designates terminal TTA3 as an operator terminal, 
enabling it to receive messages concerning printers, magnetic tapes and disks, 
and messages intended for the central operator. Later, it relinquishes terminal 
TTA3’s ability to receive messages concerning tapes. The terminal still receives 
and can respond to messages about disks and printers and messages directed to 
CENTRAL. 


$ REPLY/ENABLE=(PRINTER, DISKS, TAPES , CENTRAL) 


$ 
$3S%33S3SS% OPCOM 13-JUL-1993 11:37:09.52 %%%%%%33333 
Operator TTA3 has been enabled, username SYSTEM 


$ 

%$$33%3%%S33S% OPCOM 13-JUL-1993 11:37:09.53 %%%%%%3333% 
Operator status for operator TTA3 

CENTRAL, PRINTER, DISKS, TAPES 


$ REPLY/DISABLE=TAPES 

$$3S3S3333% OPCOM 13-JUL-1993 11:37:09.53 %%%%3%3%3%%% 
Operator status for operator TTA3 

CENTRAL, PRINTER, DISKS 

$ REPLY/DISABLE 

$%%%33%%33%33% OPCOM 13-JUL-1993 11:38:50.68 %%%%%3%%%%%% 
Operator TTA3 has been disabled, username SYSTEM 


2.4.5 Sending Requests to an Operator 


In sites where operators are assigned to assist users by mounting volumes and 
changing printer forms, users can communicate with operators by entering 
REQUEST commands and the following qualifiers: 


Qualifier Description 


/REPLY Sends a request and requests a reply to the message. Requests 
sent with this command are issued a unique identification 
number to which the operator sends the response. The user 
cannot enter any commands until the operator responds. 
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Qualifier Description 


/TO=(operator|,...]) If your facility is very large, there may be several operators, 
each of whom has specific tasks. The /TO qualifier lets users 
send requests to a specific operator. Options are as follows: 
CARDS, CENTRAL, CLUSTER, DEVICES, DISKS, LICENSE, 
NETWORK, OPER1 to OPER12, PRINTER, SECURITY, 
TAPES. 


The DCL commands MOUNT/ASSIST and BACKUP/ASSIST also request 
operator assistance. For more information, see the following sections: 


¢ For MOUNT requests, see Section 8.5. 
e For BACKUP requests, see Section 10.9.1. 


Example 


Assume an operator is monitoring an operator terminal enabled for the PRINTER 
class. The following PRINT command submits an output job that requires a 
special print form (/FORM=LETTER). The REQUEST command sends a message 
to the operator. After completing the request, the operator would send a reply, as 
explained in Section 2.4.6. 


$ PRINT/COPIES=2/ QUEUVE=LQ PRINT REPORT .OUT/FORM=LETTER 
Job REPORT (queue LQA1, entry 401) pending 
$ REQUEST/REPLY/TO=PRINTER - 

_$ "Have queued job 401 as FORM=LETTER; can you print it?" 
SOPCOM-S-OPRNOTIF, operator notified, waiting...10:42:16.10 
%OPCOM-S-OPREPLY, AFTER 11:00 
19-APR-1993 10: 25: 32.40, request 3 completed by gperator OPAO 


2.4.6 Replying to Operator Requests 
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In sites where operators are assigned to assist users by mounting volumes 
and changing printer stock, operators can reply to user requests using REPLY 
commands. Operators can use the following qualifiers: 


Qualifier Description 

/ABORT=id-number Replies to the request specified by the identification number and 
cancels the request. 

/PENDING Replies to the request specified by the identification number 


and prevents the user from entering other commands until the 
operator fulfills or aborts the request. The current terminal must 
be enabled as an operator terminal. 


/STATUS Reports which classes are enabled, and all outstanding user 
requests for the terminal from which this command was entered. 
The current terminal must be enabled as an operator terminal. 


/TO=id-number Replies to the request specified by the identification number and 
completes the request. The current terminal must be enabled as 
an operator terminal. 


Note that you can also use a variation of the REPLY/TO 
command in response to a MOUNT/ASSIST and BACKUP 
/ASSIST commands. For more information, see Section 8.5 and 
Section 10.9.1. 


An operator working with magnetic tapes would also use additional REPLY 
qualifiers specific to magnetic tape operations. For more information, see 
Section 8.8.2.4. For detailed information on the REPLY command and its 
qualifiers, see the OpenVMS DCL Dictionary. 
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Example 
In the following example, the REPLY/TO command replies to operator request 
number 5, issued by user ROBINSON. The MOUNT device is switched to DUA4, 
and the user is notified. 
$333%%33%% OPCOM, 19~APR-1993 10:20:50.39 %%3%3%33%333%% 

request 5 from user ROBINSON 

Please mount volume GRAPHIC FILES in device DUAII1: 


Shelf 4 - slot B 
$ REPLY/TO=5 "SUBSTITUTE DUA4" 


2.5 Using VMSKITBLD.COM to Modify a System Disk 


The command procedure. SYS$UPDATE:VMSKITBLD.COM allows you to 
duplicate system files from an existing system disk on another disk. The 
procedure gives you the following options: 


Option Description For More Information 


BUILD Builds a new common system disk after Section 2.5.1 
destroying all existing files on the disk. 


COPY Copies the operating system files to an existing Section 2.5.2 
disk without destroying nonsystem files that are 
currently on the disk. 


ADD Adds a new system root directory to an existing Section 2.5.3 
system disk. 


VMSKITBLD uses two disks: 


Disk Description 
Source disk The disk from which you copy system files. The source disk must be an 
existing system disk. 
Target disk The disk to which you move the system files. 
_. Caution 


Do not attempt to use VMSKITBLD with the current system disk as 
the target disk. VMSKITBLD.COM deletes files that are required for a 
running system. 


2.5.1 Using VMSKITBLD.COM to Build a New System Disk 


At some point, you might want to create a new system disk. For example, suppose 
that your existing system disk is an RA81 disk. If you purchase a larger RA90 
disk and want to use it as your system disk, you could use the VMSKITBLD 
BUILD option to build a new system disk on the RA90 disk. 


The existing system disk is the source disk. The new disk is the target disk. 


Caution 


The VMSKITBLD BUILD option initializes the target disk, deleting all 
of its previous contents. For information on copying files to an existing 
system disk without destroying files, see Section 2.5.2. 
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If you want to build your operating system on another disk and you are not 
concerned about losing the current contents of the target disk, use the BUILD 
option as described in the following procedure. 


How to Perform This Task 


1. Ifthe source disk is not the current booted system disk, boot the operating 
system from the source disk. 


Log in to the SYSTEM account. 


Make sure the disk is spun up and on line. If you are using a removable disk, 
you must also place the disk into the appropriate drive. 


4, Enter the following command to invoke VMSKITBLD: 
$ @SYSSUPDATE: VMSKITBLD 
VMSKITBLD prompts you to choose one of the following options: 
* Operation [BUILD,ADD,COPY]? 


5. Enter BUILD and press the Return key. 


VMSKITBLD displays messages that either prompt you for information 
needed to complete the operation or inform you of the procedure’s status. 


a. In response to the following prompt, enter the name of the source disk: 
* Enter mounted SOURCE disk name (ddcu:): 


b. In response to the following prompt, enter the top-level system directory 
for the source disk: 


* Enter SOURCE disk top level system directory [default = SYS0]: 
In most cases, you can choose the default value [SYSO]. 

c. In response to the following prompt, enter the name of the target disk: 
* Enter TARGET disk name (ddcu:): 


d. In response to the following prompt, enter the volume label of the target 
disk: 


* Enter the TARGET disk’s label [default = VAXVMSRL5]: 

e. In response to the following prompt, enter the top-level system directory: 
* Enter TARGET disk top level system directory [default = SYS0}: 
In most cases, you can choose the default value [SYSO]. 


f. The procedure displays the following message to warn you that the target 
disk will be initialized and to allow you to stop the procedure: 


The target disk will be initialized. 
* Target disk, DUAQ:, ready to be initialized? (Y/N): Y 


Make sure it is safe to destroy the contents of the target disk, and enter Y 
to continue. 


When the system displays the dollar sign ($) prompt, the system disk is 
built. VMSKITBLD automatically dismounts the target disk. At this point, 
the target disk contains all the operating system files required for a complete 
system. 
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6. Complete the system disk by creating a rights database and network proxy 
database and configuring the system with appropriate system parameters. 
For instructions, see Section 2.5.1.1. 


7. To use the new system disk, reboot the system with the new system disk. 


Example 


The following example runs VMSKITBLD.COM to build a new system disk. It 
copies the files on the current system disk to create a new system disk on the 
DUAO: disk. 


* Enter mounted SOURCE disk name (ddcu:): SYSSSYSDEVICE: 
* Enter SOURCE disk top level system directory [default = SYS0]: [Retum] 
* Enter TARGET disk name (ddcu:): DUAO: [Return] 
* Enter the TARGET disk’s label [default = VAXVMSRL5]: [Retum] 
* Enter TARGET disk top level system directory [default = SYS0]: |Retum] 
The target disk will be initialized. 
* Target disk, DUAO:, ready to be initialized? (Y/N): Y 
Target disk, DUAQ:, has been initialized. 
SMOUNT-I-MOUNTED, VAXVMSRL5 mounted on _DUAO: 
Creating system specific directories ... 
Creating cluster common directories ... 
Creating SYSGEN files ... 
%SYSGEN-I-CREATED, DUAQ:<SYS0.SYSEXE>SWAPFILE.SYS;1 created 
$SYSGEN-I-CREATED, ~DUA0:<SYS0.SYSEXE>PAGEFILE.SYS;1 created 
$SYSGEN-I-CREATED, _DUAO:<SYS0.SYSEXE>SYSDUMP . DMP; 1 created 
Copying files from source disk ... 
Copying DECwindows file from source disk ... 
Writing a boot block ... 
System disk complete. 


2.5.1.1 Completing a System Disk Built with VMSKITBLD.COM 
After you create a new system disk using the VMSKITBLD BUILD option, use 
the following procedure to complete the new system disk: 


1. Boot the new system disk using a conversational boot. For instructions, see 
one of the following manuals: 


— On VAX systems, see the upgrade and installation supplement for your 
computer. 


— On AXP systems, see the OpenVMS AXP Upgrade and Installation 
Manual. 


2. When the SYSBOOT> prompt appears, enter the USE DEFAULT command 
to boot with default values for all system parameters. 


Enter the CONTINUE command to continue booting. 


4. After the system boots, log in to the SYSTEM account. The password for 
the system account will be the default password, MANAGER. Make sure you 
change this password. 


5. Use the Authorize utility to create a rights database and a network proxy 
database. For more information, see the Security Guide. 


6. Run AUTOGEN from the SAVPARAMS phase to set appropriate values for 
system parameters. Be sure to specify the CHECK_FEEDBACK option. See 
Section 14.5 and the AUTOGEN section of the OpenVMS System Management 
Utilities Reference Manual for detailed information on running AUTOGEN. 


To reboot from the former system disk, specify REBOOT as the end phase 
when invoking AUTOGEN. 
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To reboot the system from the new system disk, specify SHUTDOWN as the 
end phase and reboot manually, specifying the new system disk. 


Example 


SYSBOOT> USE DEFAULT 
SYSBOOT> CONTINUE 


$ SET DEFAULT SYSSCOMMON: [ SYSEXE ] 

$ RUN AUTHORIZE 

UAF> CREATE/RIGHTS 

UAF> CREATE/PROXY 

UAF> EXIT 

$ @SYSSUPDATE:AUTOGEN SAVPARAMS REBOOT CHECK FEEDBACK 


2.5.2 Using VMSKITBLD.COM to Copy System Files to an Existing Disk 
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You can use VMSKITBLD to copy the operating system files to a target disk 
without deleting the files already existing on the target disk. For example, if you 
accidentally delete a large number of system files from a system disk, you can use 
VMSKITBLD to copy the system files from another system disk. 


To do this, the operating system must be running and the source disk that you 
intend to copy from must be mounted. 


When you use the COPY option of VMSKITBLD.COM, the user-modified files 
(including SYSUAF.DAT and site-specific command files) are not copied from 
the source disk; VMSKITBLD uses the unaltered TEMPLATE versions of 
these files. In addition, the procedure does not create the system-specific files 
SWAPFILE.SYS, PAGEFILE.SYS, or SYSDUMP.DMP. 


Before VMSKITBLD copies each new system file, it deletes the older version of 
the file from the target disk. 


How to Perform This Task 

1. Log in to the SYSTEM account. 

2. Place the target disk into the appropriate drive. 

3. Note the device name of the target disk. 

4. Enter the following command to invoke VMSKITBLD: 
$ @SYSSUPDATE: VMSKITBLD . 
VMSKITBLD prompts you to choose one of the following options: 
Operation (BUILD,ADD,COPY]? 


5. Enter COPY and press the Return key. 


VMSKITBLD displays messages that either prompt you for information 
needed to complete the copy operation or inform you of the procedure’s 
status. 


a. In response to the following prompt, enter the name of the source disk. 


* Enter mounted SOURCE disk name (ddcu:): 
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b. In response to the following prompt, enter the top-level system directory 
for the source disk: 


* Enter SOURCE disk top level system directory [default = SYS0]: 
In most cases, you can choose the default value [SYSO]. 
c. In response to the following prompt, enter the name of the target disk: 
* Enter TARGET disk name (ddcu:): 
d. In response to the following prompt, enter the top-level system directory: 
* Enter TARGET disk top level system directory [default = SYS0]: 


In most cases, you can choose the default value [SYSO]. 


When the system displays the dollar sign ($) prompt, the files have been 
copied and the system disk is complete. VMSKITBLD automatically 
dismounts the target disk. 


Example 


* Enter mounted SOURCE disk name (ddcu:): SYSSSYSDEVICE: 
* Enter SOURCE top level system directory (default = SYS0J]: [Retum] 
* Enter TARGET disk name (ddcu:): DUAQ: [Retum] 
* Enter TARGET disk top level system directory {default = SYS0]: |Retum] 
tDCL-I-ALLOC, DUA: allocated 
$MOUNT-I-MOUNTED, VAXVMSRL5 mounted on _DUAQ: 
Copying files from source disk ... 
Copying DECwindows files from source disk ... 
Writing a boot block ... 
System disk complete. 


2.5.3 Using VMSKITBLD.COM to Add an Alternate System Root Directory 


Use the ADD option to create an alternate system root directory on a target 
system disk. You might use this option to create a test environment. For 
example, if you want to test software on the operating system without interfering 
with the current version of the system, you can create an alternate system root 
directory and create a boot command procedure to select that version for testing 
sessions. 


The system disk that you are adding to cannot be in use. 


Note 


Do not use the ADD option to create a system root to add a new system to 
a VMScluster environment. Instead, use the SYS$MANAGER:CLUSTER_ 
CONFIG.COM procedure. 


The ADD option creates only new specific root directories. The current common 
directory is linked to the new root. 


How to Perform This Task 
1. Log in to the SYSTEM account. 


2. Check the number of free blocks on the system disk to make sure you have 
adequate space for the new files, including SWAPFILE.SYS, PAGEFILE.SYS, 
and SYSDUMP.DMP. The sizes of these files are determined by the type of 
computer you use. For information on calculating size for page, swap, and 
dump files, see Section 15.4. 
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3. Make sure the target system disk (your backup copy) is dismounted and on 
line. 


4. Enter the following command to invoke VMSKITBLD: 
$ @SYSSUPDATE: VMSKITBLD 
VMSKITBLD prompts you to choose one of the following options: 
Operation [BUILD,ADD,COPY]? 


5. Enter ADD and press the Return key. 


VMSKITBLD displays messages that either prompt you for information 
needed to complete the operation or inform you of the procedure’s status. 


a. In response to the following prompt, enter SYS$SYSDEVICE and press 
Return: 


* Enter mounted SOURCE disk name (ddcu:): 

b. In response to the following prompt, press Return to choose the default: 
* Enter SOURCE disk top level system directory [default = SYS0]: 

c. In response to the following prompt, enter the name of the target disk: 
* Enter TARGET disk name (ddcu:): 


d. In response to the following prompt, enter the new root directory 
specification. 


* Enter TARGET disk top level system directory [default = SYS0}: 


Note 


Do not specify directories SYSE or SYSF. SYSE is reserved for storing 
standalone BACKUP. SYSF is reserved for Digital use. 


When the system displays the dollar sign ($) prompt, the target system 
directory contains the new system root directory. VMSKITBLD automatically 
dismounts the target disk. 


6. Configure the new system root by booting the target disk and running 
AUTOGEN. For instructions, see Section 2.5.3.1. 


Example 


The following example adds an alternate system root directory named SYSA on 
the target disk SHEMP$DUAS: 


* Enter mounted SOURCE disk name (ddcu:): SYSS$SYSDEVICE: 
* Enter SOURCE top level system directory [default = SYS0]:|RETURNT 
* Enter TARGET disk name (ddcu:): SHEMPSDUA5: [RETURN] 
* Enter TARGET disk top level system directory [default = SYS0]: SYSA |RETUANT 
%DCL-I-ALLOC, _SHEMP$DUA5: allocated 
tMOUNT-I-MOUNTED, VAXVMSRL5 mounted on SHEMPSDUAS: 
Creating system specific directories ... 
Creating SYSGEN files ... 
$SYSGEN-I-CREATED, _SHEMPSDUAS :<SYSA.SYSEXE>SWAPFILE.SYS;1 created 
SSYSGEN-I-CREATED, _SHEMPSDUAS :<SYSA.SYSEXE>PAGEFILE.SYS; 1 created 
SSYSGEN-I-CREATED, _SHEMPSDUAS :<SYSA.SYSEXE>SYSDUMP. DMP; 1 created 
System disk complete. 
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2.5.3.1 Configuring a System Root Added with VMSKITBLD 
After you use VMSKITBLD to add an alternate system root directory to a system 
disk, you must configure system parameters for the new root. Perform the 
following steps: 


1. Shut down the system and halt your computer. For instructions on shutting 
down your system, see Section 4.8.1. 

2. Perform a conversational boot, as described in one of the following manuals: 
— On VAX systems, see the upgrade and installation supplement for your 

computer. 
— On AXP systems, see the OpenVMS AXP Upgrade and Installation 
Manual. 

3. When the conversational boot prompt (SYSBOOT>) appears, enter the 
following commands: 
SYSBOOT> USE DEFAULT 
SYSBOOT> CONTINUE 

4. After the system boots, log in to the SYSTEM account and execute AUTOGEN 
from the SAVPARAMS phase to set appropriate values for system parameters. 
To reboot from the former root, specify REBOOT as the end phase when 
invoking AUTOGEN. 
To reboot from the new root directory, specify SHUTDOWN as the AUTOGEN 
end phase, and reboot manually. 
See Section 14.5 and the OpenVMS System Management Utilities Reference 
Manual (AUTOGEN) for detailed information on AUTOGEN. 

Example 


SYSBOOT> USE DEFAULT 
SYSBOOT> CONTINUE 


$ @SYSSUPDATE:AUTOGEN SAVPARAMS REBOOT CHECK FEEDBACK 
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Installing, Upgrading, and Updating Software 


This chapter describes the concepts related to installing, upgrading, and updating 
operating system software. This chapter also explains the steps for using the 
VMSINSTAL command procedure, which you use to: 


¢ Update and upgrade the operating system software 
e Install and update layered-product software 


Refer to the Upgrade and Installation Manual for instructions for installing, 
upgrading, or updating a particular software product. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 
Preparing to use the installation command procedure Section 3.3.1 
Running the software installation command procedure Section 3.4 
Selecting a product list Section 3.4.1 
Selecting the source Section 3.4.2 
Selecting options Section 3.4.3 
Selecting the destination Section 3.4.4 
Specifying backup qualifiers Section 3.4.5 
Completing the installation Section 3.4.6 
Recovering from a system failure Section 3.6 


This chapter explains the following concepts: 





Concept Section 
What happens during an installation Section 3.1.1 
What happens during an upgrade Section 3.1.2 
What happens during an update Section 3.1.3 
How the software installation command procedure works Section 3.2 
What software installation command procedure options do Section 3.5 


3.1 Understanding Installation, Upgrade, and Update Procedures 


The following table outlines the differences between installation, upgrade, and 
update procedures. 
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Procedure Description 

New Used to install the operating system for the first time. 

installation +On VAX systems, used to run the operating system as a C2 class 
system. 

Upgrade Used to make major changes to an existing version of the operating 
system. 

Update Used to make minor fixes to an existing version of the operating 
system. 


TVAX specific 


The Upgrade and Installation Manual contains instructions for performing a new 
installation and an upgrade procedure. 


The following sections explain what happens during installation, upgrade, and 
update procedures for the operating system software. 


3.1.1 What Happens During an Installation 


When you install the operating system, the installation procedure does the 
following: 


Initializes the system disk, erasing its contents 
Creates a system directory structure on the new system disk 


Transfers system files from the distribution media to the new system disk 


Caution 


The installation procedure initializes the target disk, erasing its contents. 
For this reason, use the installation procedure only on new computers or 

if you are sure you want to replace the entire contents of the target disk 

with new system files. 


You use the installation procedure under the following conditions: 


If your computer is new; that is, if it has never had any version of the 
operating system running on it. 


If your computer is running a version of the OpenVMS operating system and 
you are sure you are willing to destroy the entire contents of the system disk, 
including both system and user files. 


If you are running the operating system, but are not able to perform an 
upgrade. For example, if you do not have a standard version of the OpenVMS 
operating system on your system disk, the upgrade procedure might not work 
correctly. 


On VAX systems, if you want to run the operating system in a C2 security 
environment. ¢ 


To install the operating system, follow the installation procedure in the current 
Upgrade and Installation Manual. 
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3.1.2 What Happens During an Upgrade 


When you upgrade the operating system, the upgrade procedure does the 
following: 


¢ Makes room for the upgrade by purging and deleting most system files but 
leaves some system files and all user files intact. The upgrade also leaves 
most layered products intact. In most cases, you do not need to reinstall 
layered products after you upgrade. 


¢ ‘Transfers the system files from the distribution media to the system disk. 
¢ Merges old system libraries with new libraries. 
¢ Cleans up files and structures used only during the upgrade. 


In most cases, if you are already running a standard version of the operating 
system, you can use the upgrade procedure to obtain a higher version. The 
upgrade procedure does not initialize the system disk. 


Caution 


The upgrade procedure does not work correctly if you have changed the 
names of system directories on your system disk. Restore the names of 
the original system directories on the system disk before attempting an 
upgrade. (Check the VMSKITBLD.DAT file in SYS$UPDATE for original 
system directory names.) 


To perform an upgrade, see the current version of the Upgrade and Installation 
Manual for a step-by-step description of the upgrade procedure. 


3.1.3 What Happens During an Update 


<i> 


An update procedure, which is similar to the installation of a layered product, 
makes minor fixes to the operating system. When you update the operating 
system, the update procedure replaces some system files. 


On VAX systems, the update procedure also applies patches to some of the system 
files. ¢ 


You perform one type of update after installing or upgrading software. This 
update is referred to as a mandatory update. The directions for an installation 
or an upgrade indicate when to perform a mandatory update. 


Some releases of the operating system are applied with an update procedure. 
These releases are called maintenance releases. Instructions for applying the 
update are separate from the cover letter; the update procedure has its own order 
number. 


Caution 


The update procedure does not work correctly if you have changed 
the names of system directories on your system disk. Restore the 
names of system directories before attempting an update. (Check the 
VMSKITBLD.DAT file in SYS$UPDATE for original system directory 
names.) 
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3.2 Understanding the Software Installation Command Procedure 


(VMSINSTAL.COM) 


To install and upgrade most software products, you use the command procedure 
SYS$UPDATE:VMSINSTAL.COM. You also use VMSINSTAL.COM to upgrade 
your system to the most recent version of the operating system and for any 
subsequent maintenance updates. After software is installed, it is available every 
time the system starts up. 


The following sections describe tasks related to using VMSINSTAL.COM: 


Task Section 
How to prepare your system for running VMSINSTAL.COM Section 3.3.1 
How to register and load licenses Section 3.3.2 
How to run VMSINSTAL.COM Section 3.4 
How to select appropriate VMSINSTAL.COM options Section 3.5 
What to do if the system fails while you are running Section 3.6 
VMSINSTAL.COM 

Note 


The following sections do not describe specific VMSINSTAL.COM 
procedures. The examples used are for illustration only. For details of a 
particular product, refer to the installation documentation for the specific 
product or update. 


3.3 Preparing Your System for Installing Layered Products 


This section provides guidelines for preparing your system for using 
VMSINSTAL.COM. Each software product that you install might not require 
you to follow all of the guidelines listed in this section. Refer to the installation 
documentation of each product to determine which of the following you need to 
follow. 


3.3.1 Preparing to Use VMSINSTAL.COM 
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Before you use VMSINSTAL.COM, you need to do the following (not necessarily 
in the order listed): | 


e Back up your system disk, as described in Section 10.17. Use the backup copy 
as a working copy for the installation. 
VMSINSTAL.COM might delete the older version of the product before 
it installs the newer version. If the system fails during installation, you 
might have to make a new working copy of the system disk and restart the 
installation. 


¢ Login to the SYSTEM account at the console terminal. 


¢ Be sure all users have logged out and all batch jobs have completed by using, 
respectively, the SHOW USERS and SHOW SYSTEM/BATCH commands. 
Keep users off the system until VMSINSTAL.COM completes by using the 
following command: 
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$ SET LOGINS/INTERACTIVE=0 


e Shut down DECnet for OpenVMS. (Section 20.4.4 contains instructions for 
doing this.) 


e Check system parameters. (GBLPAGES, GBLSECTIONS and NPAGEDYN 
often need to be adjusted.) Read the documentation supplied with each 
layered product to be installed, and find out if the product has any specific 
resource requirements. 


If you need to change parameter values, increment the values by adding 
ADD_ parameter-name symbols to MODPARAMS.DAT. (See Section 14.5.1.1.) 


Use AUTOGEN with feedback to properly size the system resources. (See 
Section 14.4.1.) 


e Make sure the limits in the SYSTEM account authorization record are equal 
to or greater than the recommended limits. 


To check these limits, run the Authorize utility (AUTHORIZE) to display the 
current limits of the SYSTEM account’s user authorization file. 


To run AUTHORIZE, enter the following commands: 


$ SET DEFAULT SYSSSYSTEM 
$ RUN AUTHORIZE 


At the UAF prompt (UAF>), enter the following command: 
UAF> SHOW SYSTEM 
See Section 6.1.2 for details. 


e If necessary, use the Authorize utility to modify the SYSTEM account limits. 
Changes you make do not take effect until you log out and log in again. 


For example, to increase the DIOLM limit to 18, enter the following command: 
UAF> MODIFY SYSTEM/DIOLM=18 
See Section 6.1.2 for details. 


e Physically mount the first distribution media that contains the software 
product. See Section 8.5 for details. 


e Register and load licenses, as explained in the next section. 


3.3.2 Registering and Loading Licenses 


A license refers to the authorization you have to use a product. The License 
Management Facility (LMF) lets you register, manage, and track software 
licenses on line. 


A Product Authorization Key (PAK) contains information that is provided for 
many Digital products. The data provided in the PAK allows you to register a 
software license in the license database on a system. 


You need to register and load your operating system license before you start the 
installation, as explained in the following steps: 


1. Log in to the system manager’s account, SYSTEM. 
2. Register the license in one of two ways: 


¢ Invoke the SYS$UPDATE:VMSLICENSE.COM procedure. When it 
prompts you for information, respond with data from your License 
Product Authorization Key (PAK). 
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e At the DCL prompt, enter the LICENSE REGISTER command with the 
appropriate qualifiers that correspond to License PAK information. 


3. Use one of two methods to load a license: 


¢ The License Management facility (LMF) loads the PAK only on the local 
node. 


e The System Management utility (SYSMAN) allows you to load the PAK 
throughout an entire cluster. (SYSMAN commands are a subset of LMF 
commands.) 


You need to install a license only on the local node before you use 
VMSINSTAL.COM. 


For more information about loading licenses, see the OpenVMS License 
Management Utility Manual. 
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At the beginning of the software installation command procedure, 
VMSINSTAL.COM, several prompts and messages direct and explain the 
installation. These prompts and messages differ, depending on the software 
product that you are installing. 


Before you begin, make sure that you read the installation instructions for the 
specific product or update. If you need assistance during an installation, enter a 
question mark (?) for an explanation of possible responses. 


When you start VMSINSTAL.COM, the procedure asks if you are satisfied with 
the backup of your system disk. If you have a recent backup of your system 
disk, continue; otherwise, back up your system disk before continuing with the 
installation. 


If you do not satisfy all conditions required to start VMSINSTAL.COM, the 
procedure displays a warning message explaining the problem and asks you 
if you want to continue. Digital strongly recommends that you satisfy these 
conditions before you try to start VMSINSTAL.COM again. 


Caution 


If you continue without making the required corrections, Digital cannot 
guarantee that the installation will be supported. 


How to Perform This Task 
Enter a command in the following format: 


@SYS$UPDATE:VMSINSTAL product-list source: [OPTIONS option-list] [destination] [qualifiers] 


Example 
$ @SYSSUPDATE:VMSINSTAL CALENDARO20 MUAO: 


The command in this example installs the product CALENDAR, from save sets 
named CALENDAR0O20, on a magnetic tape on the MUAO: drive. (This command 
shows the simplest case, in which you use no options or qualifiers.) 
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The following sections explain these parameters in the VMSINSTAL.COM 
command line: 


Parameter For More Information 
Product list Section 3.4.1 
Source Section 3.4.2 
Options Section 3.4.3 
Destination Section 3.4.4 
Backup qualifiers Section 3.4.5 


Section 3.4.6 explains how to complete an installation. 


3.4.1 Selecting a Product List 


Products are stored in a save set, which is a specially formatted file that contains 
a group of files. Installation and upgrade procedures move the files from the save 
set to your system disk. 


The product-list parameter lists the products that you want to install. You can 
use this parameter when you install layered products or update the operating 
system. (When you perform an upgrade procedure, you can list only one product, 
VMSnnn.) 


If you use a wildcard character (*), all versions and updates of all products from 
the distribution media will be installed in alphabetical order. 


Note 


Do not use the wildcard character if you are installing layered products 
and updating the operating system at the same time. In this case, 
you need to update the system first. If you use the wildcard character, 
VMSINSTAL sorts the product list in alphabetical order; the operating 
system would probably not be installed first. 


If you want to specify more than one item in the product-list parameter, separate 
the items using commas and no intervening spaces. Specify the product list in 
the following format: 


facvvu 


Table 3-1 explains the format of facvuu. Using this format, you can install a 
specific version and update of a product from distribution media containing 
several versions and updates. If you do not include a version and update number, 
all versions and updates to the specified product from the source are installed in 
alphabetical order. 


Table 3-1 Format of facvvu Save-Set File Name 


fac The product name code (1 to 36 alphanumeric characters) 
vv The major version number (2 digits) 
u The update number (1 digit) 


If you are installing from a distribution kit, the list of products on your 
distribution media is included with the bill of materials for the distribution 
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kit. If the list is not available, you can obtain one by using the DIRECTORY 


‘command; the distribution media then finds and displays the products that are 


included. 


How to Perform This Task 
To obtain the product list, enter commands in the following format: 


MOUNT/OVERRIDE=ID device: 
DIRECTORY device:[0,0] 


Device is the drive that holds the distribution media. 


If you are installing from a disk directory, obtain the product list by entering the 
DIRECTORY command, specifying the disk directory in the following format: 


DIRECTORY node::device:[directory] 
Examples 


1. $ MOUNT/OVERRIDE=ID MUAO: 
$MOUNT-I-MOUNTED, VMS060 mounted on MUA0: 
$ DIRECTORY MUA0:(0,0] 


The DIRECTORY command in this example directs the distribution media to 
find the products included on the MUAO: drive; for example: 


Directory MUA0:[{000,000] 


000000.DIR;1 BACKUP.SYS;1 BADBLK.SYS;1 BADLOG.SYS;1 
BITMAP.SYS;1 CONTIN.SYS;1 CORIMG.SYS;1 DECW060.C;1 
DECW060.D;1 DECW060.E;1 DECW060.F;1 INDEXF.SYS;1 
ISL_SCRIPT.ESS;1 SECURITY.SYS;1 SYS0.DIR;1 VMS060.A;1 
VMS060.B;1 VMS060.C;1 VMS060.D;1 VMS060.E;1 
VMS060.F;1 VOLSET.SYS;1 


Total of 22 files. 


2. $§ DIRECTORY BRAVO::DUA1:[0,0] 
The DIRECTORY command in this example directs the distribution media to 
find the products on the node BRAVO, which is on the DUAI: device. 
Note 


If you want to access a remote node, you must have read and execute 
access (R,E) to the directory. 


3.4.2 Selecting the Source 


The source parameter identifies the source of the optional software product as one 
of the following: 


e A drive that holds the distribution media; for example, a TK50 drive 
designated as the MUAO: drive. 


e A disk directory to which the product save set has been transferred from the 
distribution media for later installation. 


You specify a disk directory as the source when you select the Get Save Set 
option. For more information about this option, see Section 3.5.3. 


e A disk directory on another node. 
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You can also use a logical name to specify the source. If you do not specify the 
source, VMSINSTAL.COM asks you for it, as follows: 


* Where will the distribution volumes be mounted: 


3.4.3 Selecting Options 


The VMSINSTAL.COM command procedure permits the use of six options. 
Table 3-2 briefly describes each option. Section 3.5 contains a detailed description 
of each option. 


Table 3-2 VMSINSTAL.COM Options 


Letter ; 

Choice Option Description 

A! Autoanswer Makes it easier to reinstall a product after an upgrade by 
providing responses to the questions and prompts during 
the reinstallation 

AWD= Alternate Lets you specify an alternate working device for the 

Working Device temporary working directory 

G! Get Save Set Saves you time by allowing you to store product save sets 
temporarily on a magnetic tape or in a disk directory 

L File Log Logs all file activity to the terminal during installation 

N Release Notes Displays or prints the online release notes file supplied by 
the layered product 

R Alternate Root Lets you install the product on a system disk other than 


that of the running system 


1Used only when installing layered products. 


You specify each option by entering the appropriate option letter after the 
keyword OPTIONS in the command that starts VMSINSTAL.COM. The 
OPTIONS keyword is optional. However, if you have an option list, you must 
enter OPTIONS before it. If you enter an option list without the OPTIONS 
keyword, VMSINSTAL.COM displays an informational error message and the 
installation ends. (The option-list parameter lists the options requested.) 


How to Perform This Task 
To specify each option: 


1. Invoke the VMSINSTAL.COM procedure, entering appropriate option letters 
after the keyword OPTIONS. 


2. Press Return. 


If you specify more than one option, separate the options with commas. Do not 
separate the options with spaces. 


Example 
$ @VMSINSTAL.COM NEWAIDO21 MTAO: OPTIONS A,N 
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3.4.4 Selecting the Destination 


The destination parameter is optional. By default, VMSINSTAL.COM 
assumes that the product is to be installed in the system common directory 
SYS$COMMON on the system disk. However, you must use this parameter in 
the following two instances: 


¢ To install the product in an alternate root. The product is installed on a 
system disk other than that on which the target system is running. Specify 
the alternate system root in the following format: 


device:[SYSn.] 

where: 

device The device on which the alternate root resides 
SYSn. The top-level directory of the alternate system root 


You can also specify a previously defined logical name for the alternate root. 


¢ To copy the product kit save sets into a storage directory for later installation. 
For more information on the Get Save Set option, see Section 3.5.3. 


Specify the destination directory in the following format: 


device:[directory] 


where: 
device The destination disk device 
directory Usually a directory dedicated to product save sets on the specified disk 


3.4.5 Specifying Backup Qualifiers 
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The VMSINSTAL.COM command procedure includes a BACKUP command that 
copies the save sets to the destination directory. You can specify qualifiers with 
the Get Save Set option to qualify the BACKUP command further. 


The following example includes the Get Save Set option and BACKUP qualifiers: 


$ @SYSSUPDATE:VMSINSTAL TEST042 DUAQ:[KITS] OPTIONS G DUBO:[KITS] - 
_$ "VERIFY/LOG/CONFIRM" 


Following are explanations of the qualifiers shown in the example: 


Qualifier Explanation 


/VERIFY Specifies that the contents of the output specifier be compared with the 
contents of the input specifier after a save, restore, or copy operation 
is completed. Ifa file does not compare successfully, an error message 
reporting this fact is displayed. 


/LOG Causes the file specification of each file processed to be displayed at the 
terminal during the operation. The default is /NOLOG. 
/CONFIRM Displays a prompt on your terminal before each file is processed. To 


process the file, you must reply by entering Y or YES and pressing 
the Return key. The system interprets any other response, including 
simply pressing the Return key, as NO. 


The qualifiers must be enclosed in quotation marks because they are passed as a 
parameter of the Get Save Set option (G). VMSINSTAL passes the parameter to 
the BACKUP command within VMSINSTAL. 
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See the OpenVMS System Management Utilities Reference Manual for more 
information about the BACKUP command and its qualifiers. 


3.4.6 Completing the Installation 


When the installation is complete, VMSINSTAL.COM does one of the following, 
depending on the requirements of the product you have installed: 


¢ Performs an automatic shutdown of the system; you might be instructed to 
reboot manually. 


e Returns you to the system prompt. 


When the product is installed, back up the updated system disk. For instructions, 
see Section 10.17. 


3.5 Understanding Software Installation Command Procedure 
Options 


When you use VMSINSTAL.COM, the software installation command procedure 
asks if you want to select up to six possible options, which Section 3.4.3 describes 
briefly. The following sections describe the VMSINSTAL.COM options in detail. 


3.5.1 Using the Autoanswer Option (A) (Layered Products Only) 


The Autoanswer option makes it easier to reinstall a product by providing 
responses to VMSINSTAL.COM questions and prompts during the reinstallation. 
You use the Autoanswer option most often to reinstall products after an upgrade. 


If you specify the Autoanswer option when you install a product initially, an 
answer file is created in the form product.ANS in the SYS$UPDATE directory, 
where product is the product name parameter that you provide when you start 
VMSINSTAL.COM. 


The answer file contains a record of your responses to questions and prompts 
from VMSINSTAL.COM. For example, if you install the product NEWAID010 
with the Autoanswer option, VMSINSTAL.COM creates an answer file called 
NEWAID010.ANS. 


When you reinstall the product and specify the Autoanswer option (typically 
after upgrading your operating system), VMSINSTAL.COM reads the answer file 
instead of asking you questions. 


If you want to create a new answer file when you reinstall a product, you must 
first delete the existing answer file. 


Example 


Following is a sample answer file, NEW$PRODUCTO10.ANS, for a product called 
NEW$PRODUCT V1.0: 


TYP SYSSCOMMON: [SYSUPD ]NEWSPRODUCT010.ANS;1 

Do you want to install the entire kit [Y]? \ 

Are these selections correct [Y]? \ 

Does this product have an authorization key registered and loaded? \yY 
Will you allow a system shutdown after this product is installed [YES]? \ 
How many minutes for system shutdown [0]: \ 

Do you want to do an automatic system reboot [YES]? \ 


r+ + + + FF HEN 


3-11 


Installing, Upgrading, and Updating Software 
3.5 Understanding Software Installation Command Procedure Options 


3.5.2 Using the Alternate Working Device Option (AWD=) 


Restriction 


You cannot use this option to upgrade the operating system. 


You can use the Alternate Working Device option to specify an alternate 
working device for the temporary working directory (defined as the logical 
name VMI$KWD). This option allows you to perform an installation with fewer 
free blocks on the system disk than are otherwise required. 


If you do not specify this option, VMSINSTAL.COM creates the temporary 
working directory in the following location: 


SYS$SPECIFIC:[SYSUPD.facvwu] 
Table 3-1 explains the format of facvuu. 


How to Perform This Task 
Use the following format to specify this option: 


AWD=dev: [dir] 

where: 

dev Specifies the alternate working device 

dir Specifies the directory under which the facuvuvu subdirectory will be created 


Specifying a directory is optional. If you do not specify a directory, 
VMSINSTAL.COM creates the working directory on the specified device with 

the following directory specification: [000000.facvuu]. If you specify a directory, 
VMSINSTAL.COM creates the working directory as a subdirectory within the 
directory that you specify (for example, [WORK facvuu]). If the directory that you 
specify does not exist, VMSINSTAL.COM does not create it. 


Example 


To use the working directory [INSTALL.NEWAID010] on the alternate device 
DUA2:, specify the following: 


$ @SYSSUPDATE: VMSINSTAL.COM NEWAID010 CSAl: OPTIONS AWD=DUA2: [INSTALL] 


3.5.3 Using the Get Save Set Option (G) (Layered Products Only) 
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Note 


You cannot use this option to copy operating system kits. 


Installing products either from a distribution tape or from console media directly 
onto your system disk is time-consuming. The Get Save Set option saves you 
time by allowing you to copy product save sets and store them temporarily while 
you do other work; you can then perform an update more quickly at a time that 
is convenient for you. 


You might consider dedicating a user disk on a node that other licensed system 
users can access. You can store product save sets on this dedicated user disk to 
give other licensed system users fast access to the product save-set directory. 
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3.5.3.1 Storing a Product Save Set 


To store a product save set on a disk directory using the Get Save Set option, 
enter a command using the following syntax: 


@SYS$UPDATE:VMSINSTAL.COM product-list source OPTIONS G device:[directory] 
The directory you specify must exist, and the device must be mounted. 


Examples 


If you specify just one option, enter the disk directory name immediately after 
the OPTIONS G parameter, leaving a space between G and the disk directory. 
For example, if you are storing save sets for a product named NEWAID010 from 
the console drive into disk directory USER1:[PRODUCTS], enter the following 
command: 


$ @SYSSUPDATE:VMSINSTAL.COM NEWAID010 CSAl: OPTIONS G USER1: [PRODUCTS] 


If you specify more than one option, place the disk directory name after the last 
option, leaving a space between the last option and the disk directory name. For 
example: 


$ @SYSSUPDATE:VMSINSTAL.COM NEWAID010 CSAl: OPTIONS G, - 
_$ AWD=DUA2: [INSTALL] USER1: [PRODUCTS] 


VMSINSTAL.COM creates one or more files to store the product save set in the 
disk directory. The save-set file name has the following format: 


facvvu.x 


Table 3-1 explains the format of facvuu. The format of the file type (x) is as 
follows: 


x A literal file type that is used to identify save-set files, where A is the first save 
set, B the second, and so forth 
Note 


Valid file types for save-set files include the literal range A through Z and 
the numeric range VMI_0027 through VMI_9999. 


3.5.3.2 Installing a Product 
Suppose you are storing Update 1 to Version 2.0 of the product NEWAID, and 
this product requires four save sets. VMSINSTAL.COM creates the following four 
files: 


NEWAID021.A 
NEWAID021.B 
NEWAID021.C 
NEWAID021.D 


To install the product on your system, enter a command in the following format: 
@SYS$UPDATE:VMSINSTAL product-list device:[directory] 


Example 
For the product NEWAIDO10, enter this command: 


$ @SYSSUPDATE: VMSINSTAL NEWAID0O10 USER1: {PRODUCTS ] 
VMSINSTAL.COM installs the NEWAID product on your system disk. 
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3.5.4 Using the File Log Option (L) 


The File Log option logs all file activity to the terminal during installation. File 
activity is defined as any action that alters the disposition of a file, such as 
creating a new file, updating a library, or deleting a file. 


3.5.5 Using the Release Notes Option (N) 
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Use the Release Notes option to display or print the online release notes file 
supplied by a layered product and by the update procedure. 


Note 


Not all layered products provide online release notes. 


The release notes file receives the file name facuvvu.release_notes, where facuvu 
represents the product name code, version, and update numbers (see Table 3—1); 
for example, NEWAID010.RELEASE_NOTES. 


How to Perform This Task 


If release notes are available and you specify option N, VMSINSTAL.COM asks 
you the following questions. (The default answers are indicated in brackets.) 


Release notes included with this kit are always copied to SYSSHELP. 


Additional Release Notes Options: 
1. Display release notes 
2. Print release notes 
3. Both 1 and 2 
4. None of the above. 
@ *Select option [2]: 
@® *Queue name [SYSS$PRINT]: 


© *Do you want to continue the installation [N]: 


Following are explanations that correspond to the numbered entries in the 
example. 


@ This prompt allows you to choose options 1 through 4. 


@ This prompt is displayed only if you select option 2 or option 3. If you enter 
the name of a print queue, the system displays a message saying that the 
release notes have been queued successfully to the printer. If you do not 
specify a print queue, the release notes are sent to SYS$PRINT by default. 


© This prompt allows you either to continue or to end the installation. The 
default is to end the installation. 


If the product does not supply release notes, VMSINSTAL.COM displays 
two error messages. It also asks whether you want to continue or to end the 
installation, as follows: 


$VMSINSTAL.COM-W-NOFILE, New File facvvu.RELEASE NOTES does not exist. 
SVMSINSTAL.COM-W-NORELNOTE, unable to locate release notes. 


*Do you want to continue the installation [N]: 


To continue the installation (whether or not release notes are available), enter 
“Y (for YES) and press Return. 
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3.5.6 Using the Alternate Root Option (R) 


You can use the Alternate Root option to install the product on a system disk 
other than that of the running system. You might use this option to test a 
layered product without disturbing the running system. 


The operating system in the alternate root must be complete and have the same 
version or update level as the running system. All files and software products 
that the product installation refers to must be present in the alternate root. 


Notes 


Not all optional software products allow you to install a product on an 
alternate root. Consult the documentation of the specific product to 
determine whether you can install the product on an alternate root. 


Also, Digital does not support the installation of a product on an alternate 
root on the existing system disk. 


If you specify option R, the product is installed on the alternate root. However, 
you cannot create accounts or request a system reboot on an alternate root. 


3.6 Recovering from a System Failure 


If the system fails during installation of an update or optional software product, 
VMSINSTAL.COM attempts to continue the installation upon rebooting. 
Depending on when the system failed, one of three conditions exists: 


The system disk was not altered before the system failure. In this case, 
VMSINSTAL.COM instructs you to restart the installation. 


The system disk or a library used by the installation was corrupted. In this 
case, VMSINSTAL.COM instructs you to restore either the system disk or the 
corrupted library from the backup copy and to restart the installation. 


VMSINSTAL.COM continues the installation. In this case, the procedure 
performs most of the installation. In addition, VMUSINSTAL.COM might tell 
you that you must perform some tasks manually to complete the installation. 
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Starting Up and Shutting Down the System 


This chapter describes various ways to start up and shut down your system. 


To initiate startup of your system, you boot it. Many systems have unique 
booting commands. For detailed booting instructions for your system, see the 
following manuals: 


¢ On VAX systems, see the upgrade and installation supplement for your VAX 
computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 
Booting with modified system parameter values Section 4.2 
Booting in an emergency Section 4.3 
Booting with controlled startup Section 4.4 
Solving booting problems Section 4.5 
Writing a new boot block on the system disk Section 4.6 
+Reducing rebooting times on nonclustered systems Section 4.7 
Performing an orderly shutdown with SHUTDOWN.COM Section 4.8.1 
Performing an orderly shutdown with SYSMAN Section 4.8.4 
Performing an emergency shutdown with OPCCRASH Section 4.8.5 
Performing an emergency shutdown with CRASH Section 4.8.6 
TVAX specific 


This chapter explains the following concepts: 


Concept Section 

The booting and startup processes Section 4.1.1 
Nonstop boot: the most common booting operation Section 4.1.2.1 
Conversational boot: for special booting functions Section 4.1.2.2 
System startup and STARTUP.COM Section 4.1.3 
+The OpenVMS Snapshot facility Section 4.7.1 
System shutdown procedures Section 4.8 
The order of shutdown events Section 4.8.2 
TVAX specific 
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4.1 Understanding Booting and System Startup 


AXP 


Booting is the process of loading system software from the system disk into 
processor memory. When you boot your system, it automatically performs a series 
of tasks to start up your system. These tasks are collectively known as system 
startup. 


You must have installed the operating system before you boot the system for the 
first time. 


Booting procedures vary for different computers. For example, computers with 
console storage devices use a boot command procedure. You can copy and edit this 
command procedure to specify the location of the system disk. Other computers 
have an internal memory device that provides the name of the system disk. 


On AXP systems, you cannot boot from a magnetic tape device. ¢ 


4.1.1 The Booting and Startup Processes 


4-2 


Together, the booting and startup processes comprise the following steps: 


1. You enter the BOOT command. The boot procedure deposits information in 
the general-purpose registers. 


2. The bootstrap image is loaded from read-only memory (ROM) into main 
memory. The bootstrap image is a program that allows access to the system 
disk. It finds SYS$SYSTEM:SYSBOOT.EXE and loads it into memory. 


3. SYSBOOT.EXE loads the system parameters stored in the default parameter 
file into memory. (For more information on the default parameter file and 
loading of system parameters at boot time, see Section 4.2.) 

If you are performing a conversational boot, the procedure stops and displays 
the SYSBOOT> prompt. (For information on conversational booting, see 
Section 4.1.2.2.) Otherwise, SYSBOOT.EXE loads the operating system 
executive into memory and transfers control to the executive. 


When the executive finishes, it executes the SWAPPER process. 
The SWAPPER creates the SYSINIT process. 
SYSINIT creates the STARTUP process. 


STARTUP executes SYS$SYSTEM:STARTUP.COM (unless you 

indicated another file using SYSMAN, SYSGEN, or conversational 

boot). STARTUP.COM executes a series of other startup command 
procedures, including SYSTARTUP_VMS.COM. (For more information on 
STARTUP.COM, see Section 4.1.3. For more information on other startup 
procedures, see Section 5.2.1.) 


SO OP oe 


The current values of system parameters are written back to the default 
parameter file. 


8. The boot process finishes, and you can log in to the operating system. 
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4.1.2 Types of Booting Operations 


You can perform the following types of booting operations: 


For More 
Type Purpose Information 
Nonstop boot To boot without stopping to perform special Section 4.1.2.1 
operations. Use this kind of boot in most cases. 
Conversational To perform special boot operations—for Section 4.1.2.2 
boot example, to change system parameters before 
booting. 


4.1.2.1 Nonstop Boot: The Most Common Booting Operation 
The most common boot operation is a nonstop boot from the system disk. 
You perform a nonstop boot if you do not want to stop to perform special 
operations—for example, to change system parameter values—before booting. 


You would perform a nonstop boot after shutting down a system to perform 
hardware maintenance. Or, if the system disk drive were broken and you had a 
copy of the operating system on an alternate system disk, you would perform a 
nonstop boot from the alternate system disk. 


Follow the instructions for a nonstop boot in either of the following manuals: 


¢ On VAX systems, see the upgrade and installation supplement for your VAX 
computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 


4.1.2.2 Conversational Boot: For Special Booting Functions 
A conversational boot is used in programming research and development 
environments where you must alter operating conditions for experimentation, 
testing, and debugging. You use a conversational boot to perform the following 
operations: 


For More 
Operation Information 


Boot after showing or modifying individual system parameter values.' Section 4.2.1 


Boot using system parameter values from an alternate parameter Section 4.2.2 
file. 


Boot with default values for system parameters; for example, when Section 4.3.1 
modified system parameter values have caused the system to become 
unbootable.' 


Boot without running startup or login procedures; for example, when Section 4.3.2 
modified startup or login procedures have caused the system to 
become unbootable. 


Boot without the user authorization file; for example, when the user _ Section 4.3.3 
authorization file has been modified so that you cannot log in. 


Boot with an alternate site-independent startup procedure. Section 4.4.1 


Boot with a minimum startup. Section 4.4.3 


1In most cases, Digital recommends that you use AUTOGEN to modify system parameters. In special 
cases, however, you can use a conversational boot to modify a parameter value temporarily. To 
change a parameter value permanently, you must edit MODPARAMS.DAT and run AUTOGEN. For 
instructions, see Section 14.5. 
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For More 
Operation Information 
Display startup procedure commands while booting. Section 4.4.4 


To boot your system conversationally, follow the instructions for a conversational 
boot in either of the following manuals: 


e On VAX systems, see the upgrade and installation supplement for your VAX 
computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
4.1.3 System Startup and STARTUP.COM 


Immediately after your system boots, it runs the site-independent command 
procedure SYS$SYSTEM:STARTUP.COM to start up the system and control the 
sequence of startup events. This section describes STARTUP.COM. 


Caution 


Do not modify SYS$SYSTEM:STARTUP.COM. This file is deleted and 
replaced each time you upgrade your system to the next version of the 
operating system. Leaving STARTUP.COM intact prevents you from 
inadvertently altering any commands in the file, which in turn could 
cause the startup procedure to fail. 


Although you should not modify STARTUP.COM, in special cases you might need 
to control site-independent startup when booting your system. For information, 
see Section 4.4. 


STARTUP.COM uses a series of command procedures, executable images, and 
database files to perform the following startup tasks: 


e Define systemwide logical names required for the symbolic debugger, language 
processors, linker, image activator, and help processor. 


e Start processes that control error logging, SMISERVER (the system 
management server), the job controller, the operator log file, and security 
auditing. 


e Connect devices that are physically attached to the system by invoking the 
SYCONFIG.COM procedure. Configure devices and load their I/O drivers. 


¢ Install known images to reduce I/O overhead in activating the most commonly 
run images or to identify images that must have special privileges. 


STARTUP.COM executes the following site-specific startup command procedures 
in this order: 


1. SYS$MANAGER:SYCONFIG.COM 

2. SYS$MANAGER:SYLOGICALS.COM 

3. SYS$MANAGER:SYPAGSWPFILES.COM 
4. SYS$MANAGER:SYSECURITY.COM 

5. SYS$MANAGER:SYSTARTUP_VMS.COM 


For information on site-specific startup command procedures, see Section 5.2. 
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4.1.4 Messages Indicating Booting and Startup Progress 


When you successfully boot a system, it displays messages similar to the 
following: . 


1. The following message indicates that the system is executing the command 
procedure SYS$SYSTEM:STARTUP.COM: 


The OpenVMS system is now executing the system startup procedure. 


This procedure configures and initializes the system and executes several 
site-specific command procedures. For more information, see Section 4.1.3. 


2. A short time later (up to a few minutes), the system displays a message 
similar to the following: 


The OpenVMS system is now executing the site-specific system startup commands. 


This message indicates that the system is executing SYSTARTUP_VMS.COM. 
You can modify this file to perform various operations at startup time. For 
more information, see Section 5.2.7. 


3. Finally, the procedure displays informational messages and accounting 
information. For example: 
Startup processing continuing... 


$SET-I-INTSET, login interactive limit=64, current interactive value = 0 
19-APR-1994 15:00:00.00 


SYSTEM job terminated at 19-APR-1994 15:00:00.00 
Accounting information: 
Buffered I/O count: 133 Peak working set size: 401 
Direct I/O count: 12 Peak pagefile size: 2379 
Page faults: 325 Mounted volumes: 0 
Charged CPU time: 0 00:00:55.23 Elapsed time: 0 00:01:31.24 


After the system displays this information, you can log in. 


4.2 Booting with Modified System Parameter Values 
Using a conversational boot, you can modify system parameter values as follows: 
For More 
Task Information 


Boot after showing or modifying individual system parameter values Section 4.2.1 
Boot with an alternate system parameter file Section 4.2.2 


Boot with default values for system parameters Section 4.3.1 


Before using a conversational boot to show or modify system parameter values, 
you need to be familiar with the following terms: 


Term Definition 

Active values System parameter values stored in memory and used by the active 
system. 

Current values System parameter values stored in the default parameter file. 


When the system boots, it sets active values for system parameters 
using the current values. 
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Term Definition 


+On VAX systems, the default system parameter file is 
SYS$SYSTEM:VAXVMSSYS.PAR. 


£On AXP systems, the default system parameter file is 
SYS$SYSTEM:ALPHAVMSSYS.PAR. 


Default values System parameter values stored in the default list and used by 
default. 

VAX specific 

£AXP specific 


For more information on system parameters, see Section 14.1. 


4.2.1 Booting After Showing or Modifying Individual System Parameter Values 


In a conversational boot operation, you can show and modify values for individual 
parameters.! The system modifies the values both in memory and in the system 
parameter file. 


How to Perform This Task 


1. Follow the instructions for performing a conversational boot in one of the 
following manuals: 


e On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 


2. At the SYSBOOT> prompt, enter SHOW and SET commands to show and 
change the value of system parameters. For example: 


SYSBOOT> SET UAFALTERNATE 1 


For information about SET and SHOW commands, see the OpenVMS System 
Management Utilities Reference Manual (SYSGEN). 


3. After you show or set the necessary parameter values, enter the CONTINUE 
command to continue booting. 


Example 

SYSBOOT> SHOW UAFALTERNATE 

Parameter Name Current Default Min. Max. Unit 
Dynamic 

UAFALTERNATE 0 0 0 1 Boolean 


SYSBOOT> SET UAFALTERNATE 1 
SYSBOOT> CONTINUE 


4.2.2 Booting with an Alternate System Parameter File 
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In programming research and development environments where you must alter 
operating conditions for experimentation, testing, and debugging, you might 
want to temporarily boot your system using system parameter values stored in 
a parameter file other than the default parameter file. The conversational boot 
operation lets you reset active values using a different parameter file. 


1 In most cases, Digital recommends that you use AUTOGEN to modify system 
parameters. In special cases, however, you can use a conversational boot to modify a 
parameter value temporarily. To change a parameter value permanently, you must edit 
MODPARAMS.DAT and run AUTOGEN. For instructions, see Section 14.5. 
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How to Perform This Task 


1. Follow the instructions for performing a conversational boot in one of the 
following manuals: 


e On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
2. At the SYSBOOT> prompt, enter a command in the following format: 
USE file-spec 


For file-spec, specify the file name and type of the alternate parameter file. 
The file must be in SYS$SYSTEM. You cannot specify a device name. For 
example: 


SYSBOOT> USE SYSSSYSTEM:ALTPARAMS . DAT 
3. Enter the CONTINUE command to continue booting. 


Example 
SYSBOOT> USE SYSSSYSTEM:ALTPARAMS .DAT 


SYSBOOT> CONTINUE 


4.3 Booting in an Emergency 


If a system problem prevents your system from booting, you might need to 
perform an emergency boot operation. Table 4—1 describes these emergency boot 
operations. 


Table 4-1 Emergency Boot Procedures 


For More 
Operation Use Information 
Booting with default When parameter values in the Section 4.3.1 
system parameters parameter file have been modified 
so that the system is unbootable 
Booting without startup If an error in the startup or login Section 4.3.2 


and login procedures procedures prevent you from logging in 


Booting without the user If you have forgotten the password and __ Section 4.3.3 
authorization file cannot log in to a privileged account 


4.3.1 Booting with Default System Parameters 


If the current values stored in the parameter file have been incorrectly modified, 
these incorrect values might cause the system to become unbootable. With a 
conversational boot operation, you can reset the active values for all system 
parameters to the default value.! 


1 In most cases, Digital recommends that you use AUTOGEN to modify system 


parameters. In special cases, however, you can use a conversational boot to modify a 
parameter value temporarily. To change a parameter value permanently, you must edit 
MODPARAMS.DAT and run AUTOGEN. For instructions, see Section 14.5. 
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How to Perform This Task 


s 


1. Perform a conversational boot by following the instructions in one of the 
following manuals: 


¢ On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
2. At the SYSBOOT> prompt, enter the following command: 

SYSBOOT> USE DEFAULT 

This command specifies that default values should be used for all parameters. 
3. Enter the following command to continue booting: 

SYSBOOT> CONTINUE 


4. When the system finishes booting, determine which changed parameter 
caused the problem, and reset the parameter value. If you specified the value 
for the parameter in the AUTOGEN parameter file MODPARAMS.DAT, fix 
the value in that file and ran AUTOGEN. For more information, see Section 
14.5. 


5. Shut down and reboot the system. 


Example 


SYSBOOT> USE DEFAULT 
SYSBOOT> CONTINUE 
Username; SYSTEM 
Password: 


$ EDIT SYSSSYSTEM:MODPARAMS .DAT 


[Insert the following line in MODPARAMS.DAT: ] 
MIN _NPAGEDYN = 2999808 


$ @SYSSUPDATE:AUTOGEN SAVPARAMS REBOOT 


4.3.2 Booting Without Startup and Login Procedures 
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If the system does not complete the startup procedures or does not allow you to 
log in, bypass the startup and login procedures. The startup and login procedures 
provided by Digital should always work. However, if you introduce an error 
when modifying the startup or login procedures, it is possible to accidentally lock 
yourself out of the system. 


How to Perform This Task 


1. Perform a conversational boot operation by following the instructions in one 
of the following manuals: 


¢ On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
2. Enter the following command at the SYSBOOT> prompt: 
SYSBOOT> SET/STARTUP OPA0: . 
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3. Enter the following command to continue booting: 
SYSBOOT> CONTINUE 


4. When the system is booted, the operator console displays the DCL command 
prompt ($). You are logged in. 


5. Enter the following DCL command: 
$ SET NOON 


This command directs the operating system to ignore any errors that might 
occur. If you do not enter this command and you invoke an error, the system 
will log you out. 


6. Correct the error condition that caused the login failure. That is, make the 
necessary repairs to the startup or login procedures, or to the UAF. 


Invoke a text editor to correct the file. Note that some system consoles might 
not supply a screen-mode editor. You can also copy a corrected file and delete 
the incorrect version by using the RENAME and DELETE commands. 


7. Invoke SYSMAN and enter the following commands to reset the startup 
procedure: 


$ RUN SYSSSYSTEM: SYSMAN 7 
SYSMAN> PARAMETERS USE CURRENT 

SYSMAN> PARAMETERS SET/STARTUP SYSSSYSTEM:STARTUP.COM 
SYSMAN> PARAMETERS WRITE CURRENT 

SYSMAN> EXIT 

$ 


8. Perform a normal startup by entering the following command: 
$ @SYSSSYSTEM: STARTUP 
Example 


SYSBOOT> SET/STARTUP OPA0: 

SYSBOOT> CONTINUE 

$ SET NOON 

$ SET DEFAULT SYSS$SYSROOT: [ SYSEXE] 

$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> PARAMETERS USE CURRENT 

SYSMAN> PARAMETERS SET/STARTUP SYSSSYSTEM:STARTUP.COM 
SYSMAN> PARAMETERS WRITE CURRENT 

SYSMAN> EXIT 

$ @SYSSSYSTEM: STARTUP 


4.3.3 Booting Without the User Authorization File 


Ordinarily, the startup and login procedures provided by Digital always work; 
however, certain user interventions can cause them to fail. A very simple way to 
lock yourself out of the system is to set passwords to login accounts and forget 
them. In such an emergency, you can use the alternate user authorization file 
rather than the standard user authorization file. 


Note 


You can use this method only to log in to the system from the console 
terminal; you cannot use other terminal lines. 


4-9 


Starting Up and Shutting Down the System 
4.3 Booting in an Emergency 


4-10 


Setting the system parameter UAFALTERNATE defines the logical name 
SYSUAF to refer to the file SYS$SYSTEM:SYSUAFALT.DAT. If this file is 
found during a normal login, the system uses it to validate the account and 
prompts you for the user name and password. 


If it cannot find this file, the system assumes that the UAF is corrupt and accepts 
any user name and any two passwords to log you in to the system from the 
system console. Logins are prohibited from all other terminal lines. 


When you perform this procedure, the system assigns the following values to your 
user account: 


Field Value 

Name User name 

UIC [001,004] 

Command interpreter DCL 

Login flags None 

Priority Value of the system parameter DEFPRI 
Resources Values of the PQL system parameters 
Privileges All 


The process name is usually set to the name of the device on which you logged in 
(for example, _OPAO:). 


How to Perform This Task 


1. Perform a conversational boot by following the instructions in one of the 
following manuals: 


e On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


e On AXP systems, see the Upgrade and Installation Manual. 
2. At the SYSBOOT> prompt, enter the following command: 
SYSBOOT> SET UAFALTERNATE 1 


3. If your system is running DECwindows Motif for OpenVMS systems, you 
must also disable the windowing system by entering the following command: 


SYSBOOT> SET WINDOW SYSTEM 0 
4, Enter the CONTINUE command to continue booting: 
SYSBOOT> CONTINUE 


5. When the startup procedure completes, log in on the console terminal by 
entering any user name and any two passwords in response to the Username: 
and Password: prompts. 


6. Enter the following command to use the default UAF: 
$ DEF INE/SYSTEM/EXECUTIVE MODE SYSUAF SYSSSYSTEM:SYSUAF.DAT 


7. Use the Authorize utility to fix the problem that caused you to be locked out 
of the system (for example, a forgotten password). Enter HELP MODIFY 
at the UAF> prompt for information about modifying passwords. For more 
details, see the OpenVMS System Management Utilities Reference Manual. 
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8. Enter the following commands to invoke SYSMAN and clear the 
UAFALTERNATE system parameter you set in step 2: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> PARAMETERS USE CURRENT 
SYSMAN> PARAMETERS SET UAFALTERNATE 0 


In most cases, Digital reeommends that you use AUTOGEN to modify system 
parameters. However, since this parameter is being changed only temporarily, 
you can use SYSMAN or SYSGEN to change it back. 


9. If you disabled the windowing system in step 3, reenable it by entering the 
following command: 


SYSMAN> PARAMETERS SET WINDOW SYSTEM 1 

10. Enter the following command to save the changed system parameter values: 
SYSMAN> PARAMETERS WRITE CURRENT 

11. Shut down and reboot the system. 


Example 

SYSBOOT> SET UAFALTERNATE 1 
SYSBOOT> SET WINDOW SYSTEM 0 
SYSBOOT> CONTINUE ~ 
Username: 
Password: 


Password: 


$ DEFINE/SYSTEM/EXECUTIVE MODE SYSUAF SYS$SYSTEM:SYSUAF.DAT 
$ SET DEFAULT SYSSSYSTEM 

$ RUN AUTHORIZE 

AUTHORIZE> MODIFY SYSTEM/PASSWORD=FGLFTUTU 

AUTHORIZE> EXIT 


$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> PARAMETERS USE CURRENT 
SYSMAN> PARAMETERS SET WINDOW SYSTEM 1 
SYSMAN> PARAMETERS SET UAFALTERNATE 0 
SYSMAN> PARAMETERS WRITE CURRENT 


SYSMAN> EXIT 
$ @SYSSSYSTEM: SHUTDOWN 


4.4 Booting with Controlled Startup 


Section 4.1.3 explains the site-independent startup command procedure, 
SYS$SYSTEM:STARTUP.COM. By default, when your system boots, it 
automatically executes STARTUP.COM to execute startup events. Under 

special circumstances, you might want to control site-independent startup when 
you boot the system. For example, you might want to perform one of the following 


tasks: 

Task For More Information 
Boot with an alternate site-independent startup procedure Section 4.4.1 

Boot with an alternate site-independent startup command Section 4.4.2 


procedure by default 


Boot with minimum startup Section 4.4.3 
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Task For More Information 


Display startup procedure commands as they execute Section 4.4.4 


Caution 


Do not modify STARTUP.COM. The system requires this procedure to 
correctly start up the system. For information on modifying site-specific 
startup procedures to perform site-specific operations, see Section 5.2. 


4.4.1 Booting with an Alternate Site-Independent Startup Procedure 
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The default system startup procedure is SYS$SYSTEM:STARTUP.COM. 

Digital recommends you do not modify STARTUP.COM. However, in special 
environments, you might want the system to perform special startup commands. 
The conversational boot lets you specify that the system temporarily use an 
alternate startup procedure. 


You can also perform site-specific startup events by adding commands to the 
site-specific startup command procedures. For more information, see Section 5.2. 


How to Perform This Task 


1. Follow the instructions for performing a conversational boot in one of the 
following manuals: 


e On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
2. Enter the following command to show the current startup file: 
SYSBOOT> SHOW/STARTUP 


3. Enter a command in the following format to specify the alternate site- 
independent startup command procedure: 


SET/STARTUP file-spec 


Specify for file-spec the entire file specification for the startup file to be used, 
including the device and directory. For example: 


SYSBOOT> SET/STARTUP SYSS$SYSTEM: XSTARTUP.COM 


If the startup file specified as file-spec does not exist, the system displays the 
following message: 


Error opening primary input file SYSSINPUT 
File not found 


Check the file name you entered. Make sure you specified it correctly. 
4. Enter the following command to verify the change: 

SYSBOOT> SHOW/STARTUP 
5. Enter the following command to continue booting: 

SYSBOOT> CONTINUE 


To make your alternate site-independent startup procedure the default startup 
procedure, see Section 4.4.2. 
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Example 


SYSBOOT> SHOW/STARTUP 

Startup command file = SYSSSYSTEM:STARTUP.COM ; 
SYSBOOT> SET/STARTUP SYSSSYSTEM:XSTARTUP.COM 

SYSBOOT> SHOW/STARTUP 

Startup command file = SYSS$SYSTEM:XSTARTUP.COM 

SYSBOOT> CONTINUE 


4.4.2 Specifying an Alternate Default Startup Command Procedure 


The default system startup procedure is SYS$SYSTEM:STARTUP.COM. However, 
in special environments, you might want the system to perform special startup 
commands. If you frequently require a startup command procedure other than 
SYS$SYSTEM:STARTUP.COM, you can specify that the alternate procedure be 
used by default. 


How to Perform This Task 


1. Edit the file SYS$SYSTEM:MODPARAMS.DAT. AUTOGEN uses this file to 
modify parameters. 


2. Add a line to MODPARAMS.DAT assigning the name of your alternate 
procedure to the symbol STARTUP. For example: 


STARTUP = "SYSSSYSTEM:MY_ STARTUP.COM" 


3. At a convenient time, invoke AUTOGEN. When the system reboots, the 
procedure specified in step 2 becomes the default startup command procedure. 


Example 
$ EDIT SYSSSYSTEM:MODPARAMS . DAT 


[Insert the following line in MODPARAMS.DAT: ] 
STARTUP = "SYSSSYSTEM:MY STARTUP.COM" 


$ @SYSSSYSTEM:AUTOGEN SAVPARAMS REBOOT 


4.4.3. Booting with Minimum Startup. 


In special cases, you might want to boot your system without performing the full 
sequence of startup events. For example, if a startup event prevents you from 
logging in, you might want to boot the system without executing the startup, so 
that you can log in and fix the problem. 


When you boot with minimum startup, the system starts only the components 
that are absolutely required to run the system. These tasks can vary between 
different releases of the operating system. 


How to Perform This Task 


1. Follow the instructions for performing a conversational boot in one of the 
following manuals: 


e On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
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2. At the SYSBOOT> prompt, enter the following command: 
SYSBOOT> SET STARTUP _P1 "MIN" 

3. Enter the following command to continue booting: 
SYSBOOT> CONTINUE 


4. After the system boots, log in and enter the following commands to invoke 
SYSMAN and clear the STARTUP_P1 parameter you set in step 2: 


$ RUN SYSS$SYSTEM:SYSMAN 

SYSMAN> PARAMETERS USE CURRENT 
SYSMAN> PARAMETERS SET STARTUP_P1 "" 
SYSMAN> PARAMETERS WRITE CURRENT 


Example 


[perform a conversational boot] 
SYSBOOT> SET STARTUP_P1 "MIN" 
SYSBOOT> CONTINUE 

[system completes booting] 


Username: 
Password: 


Password: 


$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> PARAMETERS USE CURRENT 
SYSMAN> PARAMETERS SET STARTUP Pl "" 
SYSMAN> PARAMETERS WRITE CURRENT 


4.4.4 Booting While Displaying Startup Procedure Commands 
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In some cases—for example, when you are trying to test a startup command 
procedure, or when troubleshooting startup problems—it is helpful to ete the 
startup commands as they are executed. 


How to Perform This Task 


1. Follow the instructions for performing a conversational boot in one of the 
following manuals: 


e On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


e On AXP systems, see the Upgrade and Installation Manual. 
2. At the SYSBOOT> prompt, enter the following command: 


SYSBOOT> SET STARTUP P2 "YES" 
3. Enter the following command to continue booting: 
SYSBOOT> CONTINUE 


4. After the system boots, log in and enter the following commands to invoke 
SYSMAN and clear the STARTUP_P2 parameter you set in step 2: 


$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> PARAMETERS USE CURRENT 
SYSMAN> PARAMETERS SET STARTUP _P2 "" 
SYSMAN> PARAMETERS WRITE CURRENT 
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Example 


[perform a conversational boot] 
SYSBOOT> SET STARTUP_P2 "YES" 


SYSBOOT> CONTINUE 
[system completes booting] 


Username: 
Password: 


Password: 


$ RUN SYSSSYSTEM:SYSMAN 
SYSMAN> PARAMETERS USE CURRENT 
SYSMAN> PARAMETERS SET STARTUP _P2 "" 
SYSMAN> PARAMETERS WRITE CURRENT 
4.4.5 Displaying Startup Procedure Commands with SYSMAN 


In addition to performing a conversational boot to display startup procedures, you 
can use SYSMAN to display startup status with the STARTUP SET OPTIONS 
command. The advantage of using SYSMAN is that you can obtain verification 
and logging for multiple nodes at a time. 


SYSMAN startup logging redefines STARTUP_P2 to specify: 
¢ The amount of debugging information STARTUP.COM displays 
e¢ Whether to keep a log of the startup 


The STARTUP SET OPTIONS command provides four options, as shown in 
Table 4-2. 


Table 4—2 Startup Logging Options 


Option Function 

/VERIFY=FULL Displays every line of DCL executed by component startup 
procedures and by STARTUP.COM. 

/VERIFY=PARTIAL Displays every line of DCL executed by component 
startup procedures, but does not display DCL executed by 
STARTUP.COM. 

/OUTPUT=FILE Creates SYS$SPECIFIC:[SYSEXE]STARTUP.LOG, which 


/OUTPUT=CONSOLE contains all of the output generated by startup procedures. 
Alternatively, you can display the output on the console. 


/CHECKPOINTING Displays informational messages describing the time and 
status of each startup phase and component file. 


How to Perform This Task 

1. At the $ prompt, enter the following command: 
$ RUN SYSSSYSTEM: SYSMAN 

2. At the SYSMAN> prompt enter the following command: 
SYSMAN> STARTUP SET OPTIONS/[qualifier] 


Qualifiers can be any of the options specified in Table 4—2. These options take 
effect the next time you boot the system. 
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Example 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> STARTUP SET OPTIONS/VERIFY=FULL/OUTPUT=FILE/CHECKPOINTING 


This example requests startup logging with: 


Full verification 
Output to the STARTUP.LOG file 
Checkpointing 


To show the current startup options, enter the following command: 
SYSMAN> STARTUP SHOW OPTIONS 


For more information, see the OpenVMS System Management Utilities Reference 
Manual. 


4.5 Solving Booting Problems 
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A hardware or software malfunction can prevent the operating system from 
booting when you enter the BOOT command. 
Hardware Problems 


A read error on a disk drive or console medium, or a machine check error, might 
indicate a hardware malfunction. When a hardware problem occurs, a question 
mark (?) usually precedes the error message that is displayed on the system 
console terminal. You should then do one or both of the following: 


1. Consult the hardware manual for your computer. 
2. Contact your Digital Services representative. 


Software Problems 


If the operating system is loaded into memory but the STARTUP.COM command 
procedure does not execute, a software malfunction has probably occurred. 
Suspect this condition if a message similar to following does not appear: 


The OpenVMS system is now executing the system startup procedure. 
Perform one or both of the following actions to correct the situation: 


e ‘Try again, by repeating the boot procedure. For instructions, see one of the 
following manuals: 


— On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


— On AXP systems, see the Upgrade and Installation Manual. 


If you have a removable system disk, replace it with a backup copy of the 
system disk. Try to boot the system again. 


e Leave the system disk in the original drive. Restore a backup copy of the 
system disk using standalone BACKUP. For instructions, see Section 10.17. 
Try to boot the system again. 
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4.6 Writing a New Boot Block on the System Disk 


Block 0 on a system disk is the boot block. It contains the location and size 
of the bootstrap image that is used to boot the system. Certain processors, in 
order to boot, must read this boot block to obtain the location of the bootstrap 
image. 


Processors that read a boot block include the following: 

e VAX-—11/750 

¢ VAX 8200, 8250, 8300, and 8350 

e VAX 6000-200, 6000-300, 6000-400, 6000-500, and 6000-600 
e VAX 7000 and VAX 10000 


e All AXP systems supported by OpenVMS AXP Version 1.5 (subject to change 
for future systems) 


To determine if your system reads the boot block, check one of the following 
manuals: 


e On VAX systems, see the upgrade and installation supplement for your VAX 
computer. 


e On AXP systems, see the Upgrade and Installation Manual. 


If you suspect that the boot block on the system disk is invalid, you can write a 
new boot block using the Writeboot utility (WRITEBOOT). The following actions 
might cause a boot block to become invalid: 


¢ Modifying the bootstrap image with the SET FILE/MOVE command or the 
$MOVEFILE system service. 


e Restoring a backup of the system disk created without the /IMAGE qualifier. 


e Adding a new version of the bootstrap image, for example, during an 
operating system upgrade. (When the upgrade procedure adds a new version 
of the bootstrap image, it automatically uses WRITEBOOT to write a new 
boot block.) 


You must have LOG_IO privilege to use the Writeboot utility. 


How to Perform This Task 
i> On VAX systems, follow these steps to use the Writeboot utility: 


1. To start the Writeboot utility, enter the following command: 
$ RUN SYSSSYSTEM:WRITEBOOT 

2. The procedure displays the following message: 
Target system device (and boot file if not VMB.EXE):? 


On VAX systems, VMB.EXE is the default bootstrap image. Enter a response 
in the following format: 


device:[VMS$COMMON.SYSEXE]VMB.EXE; 


Use the device name format described in the upgrade and installation 
documentation for your processor. If you want to boot using a bootstrap 
image other than the default, you must specify the full file specification of the 
image, including device and directory. 
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The procedure displays the following message: 
Enter VBN of boot file code (default is one): 


Ordinarily, the boot code is located at virtual block number (VBN) 1 of the 
bootstrap image. Press Return to accept the default value of 1. 


The procedure displays the following message: 
Enter load address of primary bootstrap in HEX (default is 200): 


The load address is the location in memory (specified in hexadecimal 
notation) to which the system loads the bootstrap image. Ordinarily you 
copy the bootstrap image to address 200. Press Return to accept the default 
value of 200. 


The Writeboot utility writes the information you specified to the boot block 
(block 0) in the [VMS$COMMON.SYSEXE] directory of the system disk. ¢ 


On AXP systems, follow these steps to use the Writeboot utility: 


1. 


To start the Writeboot utility, enter the following command: 
$ RUN SYSSSYSTEM:WRITEBOOT 


The procedure asks you whether you want to write the VAX portion of the 
boot block: 


Update VAX portion of boot block (default is Y): 
Enter NO. 

The utility displays the following prompt: 

Update Alpha portion of boot block (default is Y): 
Press Return to acccept the default value of Y. 

The utility prompts you for the AXP bootstrap image: 
Enter Alpha boot file: 


On AXP systems, APB.EXE is the default bootstrap image. Enter a response 
in the following format: 


device:[ VMS$COMMON.SYSEXEJAPB.EXE; 
For device, specify the device name of the system disk. 


The Writeboot utility writes the information you specified to the boot block 
(block 0) in the [VMS$COMMON.SYSEXE] directory of the system disk. ¢ 


On VAX and AXP systems, the Writeboot utility might display one or more of the 
following error messages: 


You lack LOG_IO privilege 

This message means you do not have the correct privilege to use the Writeboot 
utility. 

You lack READ or WRITE access to TARGET DEVICE. DISMOUNT and 
REMOUNT 


This message means that access to the target device is limited. Check the 
WRITE PROTECT button on the disk drive. 
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¢ VBN must be >= 1 
This message means you cannot specify a 0 as the virtual block number 
(VBN). 

Example 

On VAX systems, the following example writes a boot block on a system disk: 


$ RUN SYSSSYSTEM:WRITEBOOT 

Target system device (and boot file if not VMB.EXE):? DUAOQ:[VMSSCOMMON.SYSEXE]VMB. EXE 
Enter VBN of boot file code (default is one) :[Retum] 

Enter load address of primary bootstrap in HEX (default is 200): |Retum] @ 


On AXP systems, the following example writes a boot block on a system disk: 


$ RUN SYSSSYSTEM:WRITEBOOT 
Update VAX portion of boot block (default is Y): N 


Update Alpha portion of boot block (default is Y): |Retum] 
Enter Alpha boot file: DUA0:[VMSSCOMMON.SYSEXE]APB.EXE; @ 


4.7 Reducing Rebooting Times on Nonclustered Systems (VAX 


Only) 





Some VAX workstation systems can significantly reduce the time needed for 
rebooting by using the OpenVMS Snapshot facility. You can use the Snapshot 
facility only for workstations that are not in a VAXcluster environment; the 
Snapshot facility can also only be used on VAX systems. 


The following sections describe the concepts and use of the Snapshot facility. 


4.7.1 Understanding the Snapshot Facility (VAX Only) 


The Snapshot facility lets you reduce system startup time by booting your system 
from a saved system image disk file. That is, some systems can reduce rebooting 
time because Snapshot eliminates the need to execute many of the procedures in 
the traditional startup process, as well as the time needed for DECwindows login. 
The Snapshot facility is especially well suited to single-user workstations. 


The Snapshot facility supports some, but not all, software components that may 
be on your workstation system. To accommodate any features or components 

on your system that Snapshot does not support, a procedure executed during a 
Snapshot reboot performs the required startup procedures for such components. 
This procedure, called SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM, is 
analogous to the SYS$MANAGER:SYSTARTUP_VMS.COM file (previously called 
SYSTARTUP_V5.COM). 


The time saving for system startup will depend on your specific hardware and 
software configuration; however, many workstations can be expected to reduce 
startup time by 50-80 percent or more. (“Startup time,” for the purpose of this 
discussion of the Snapshot facility, is defined as the time between entering the 
console BOOT command to the time that a user is able to perform useful work 
after logging into the system, including the installation and activation of all 
layered produces, network communications, and workstation windowing systems. 
The time does not include power-up diagnostics that are not executed in response 
to the boot command.) 
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The snapshot procedure checks each active process on the system to verify 

that each process conforms to a set of rules that guarantee data integrity. The 
snapshot procedure then makes the system quiescent by placing all processes 

in an MWAIT state and by rescheduling itself as a real-time process running 

at software priority 31. When the system is quiescent, the snapshot procedure 
requests a flush of the file system caches and then copies the contents of physical 
memory, the page file, and the swap file to a snapshot file. At this point, the 
snapshot procedure, if successful, invokes a system restart. 


4.7.2 Using Snapshot (VAX Only) 


To use the Snapshot facility, you must take a system snapshot that can be used 
for subsequent rebooting. The following list briefly how to prepare for and take 
the system snapshot; each of these activities is described in greater detail in 
subsequent sections: 


1. Prepare for a system snapshot by modifying your site-specific 
startup procedure so that startup activities on your system that are 
supported by Snapshot remain in SYS$MANAGER:SYSTARTUP_ 
VMS.COM, and that all other startup activities are moved to 
SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM. Other preparations 
include ensuring the proper ae quotas and ensuring that the proper 
environment is in place. 


2. After preparing your system, you take a system image snapshot by 
executing the Snapshot command procedure that is supplied on your system. 
This procedure does the following: 


e Writes out the memory to a system image snapshot. 


e Sets the appropriate system parameter so that subsequent system reboots 
will use the system image snapshot by default. 


e Shuts down your system. 


3. If the system image snapshot is successful, then the system image file that 
you created is used each time that you reboot your system. If the system 
image snapshot is not successful, go back to the previous step and correct the 
errors that prevented you from taking the successful snapshot. Section 4.7.5 
contains some useful hints in resolving some errors that you might encounter. 


The sections that follow describe how to prepare your workstation for a snapshot 
image, how to use the snapshot command procedure, and how to troubleshoot 
problems with the Snapshot facility. 


4.7.3 Preparing Your Workstation for a Snapshot (VAX Only) 
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To prepare your workstation for the system image snapshot that will be used 
during system reboot, you must do the following tasks, which are explained in 
detail later in this section: 


1. Ensure that account quotas are set to sufficient levels. 


2. Modify your site-specific startup procedures to conform to the requirements of 
the Snapshot facility. 


3. Modify certain parameters. 


Note that the Snapshot facility is valid only for workstations that are not in a 
VAXcluster environment. Therefore, the VAXCLUSTER system parameter must 
be set to 0 for you to use the Snapshot facility. For information on setting system 
parameters, see Chapter 14. 
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1. Setting Account Quotas 

You should take the system image snapshot from the SYSTEM account. Make 
sure the following quotas for the SYSTEM account are met or exceeded: 

e A WSDEF quota of at least 1024 blocks 

¢ A WSQUO quota of at least 1024 blocks 


To determine the current quotas for the SYSTEM account and to modify the 
current quotas, see Chapter 6. 
2. Modifying Site-Specific Startup Procedures for the Snapshot Facility 


The Snapshot facility supports a finite number of applications and components 
on your system. If you want to use the Snapshot facility, you must be sure 
that the site-specific startup file, SYSSMANAGER:SYSTARTUP_VMS.COM, 
includes references to only those features that Snapshot supports. Features 
that are unsupported by Snapshot should be addressed in a separate file, 
SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM. 


The following functions are supported by the Snapshot facility: 


e Starting batch and print queues without special symbionts. Note, however, 
that these queues are temporarily stopped when you create a snapshot. 


¢ Defining logical names. 

e Installing images that are not revised between reboots. 
e Starting up DECnet Phase IV. 

¢ Defining DCL symbols. 

e Loading licenses. 


¢ Mounting Files—11B disks. CD drives are supported; however, their power- 
failure initialization sequence is long, and you can realize a faster system 
restart by dismounting such disks before taking the system image snapshot. 


All other operations are unsupported and might cause the snapshot to fail. Some 
of the most common unsupported operations are as follows: 


e Loading user-written drivers 

¢ Loading user-written system images 

¢ Running layered product images 

¢ Mounting LAD, InfoServer, DFS, and foreign or non-Files—11-B disks 


Before attempting to run the Snapshot facility command procedure, you 
should remove the commands that start up any of these operations (as 
well as commands that start up any other unsupported operations) from 
SYS$MANAGER:SYSTARTUP_VMS.COM. 


Applications that are not supported by the Snapshot facility (and therefore 
removed from SYS$MANAGER:SYSTARTUP_VMS.COM) should be placed in 
the post-startup cleanup file, SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM. 
This file is executed after a system startup that has been generated from a 
saved system image. The SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM 
file has the same format as the standard SYS$MANAGER:SYSTARTUP_ 
VMS.COM file. A template for the cleanup file is available in the file 
SYS$MANAGER:SNAPSHOT$SYCLEANUP.TEMPLATE. 
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3. Modifying Other Parameters 


For your workstation, follow each of these steps to prepare for a system image 
snapshot: 


¢ Turn off logging in the Session Manager. 


To do this, create a file named SYS$MANAGER:DECW$PRIVATE_APPS __ 
SETUP.COM and restart DECwindows, as follows: 


$ SET DEF SYSSMANAGER 
$ CREATE DECWSPRIVATE APPS SETUP.COM 
$ DECWSSESSIONLOG == "FALSE" 


$ @DECWSSTARTUP RESTART 
Restarting the DECwindows Software stops everything displaying on your 
workstation. Do you really want to restart the DECwindows Software? Y 


¢ Turn off broadcast for the console by issuing the following command: 
$ SET TERMINAL/PERMANENT/NOBROADCAST OPA0: 


°¢ Set the SYS$DECDTM_INHIBIT logical name. 


Set the SYS$DECDTM_INHIBIT logical name by adding the following line to 
the file SYSSMANAGER:SYLOGICALS.COM: 


$ DEFINE /SYSTEM /EXEC SYSSDECDTM_ INHIBIT TRUE 


¢ ‘You cannot open writable files. 


You can take a saved image snapshot so that the rebooted system will display 
either of the following: 


¢ The DECwindows LOGIN screen 


e The pause screen of an active session 
If you want the LOGIN screen, skip the remainder of this section. 


An essential part of taking a successful snapshot is to eliminate open writable 
files. If you want to take a saved image snapshot with an active paused 
screen, be sure that the following DECwindows applications are not active in 
your session, because they might have open files: 


¢ Message Window—avoid specifying “Message Window” for automatic 
startup 


¢ lLinkworks—avoid specifying “Linkworks Startup” for automatic startup 
or other applications, such as the Bookreader 


¢ Cardfiler 
e DECwindows Mail 


e Calendar 


Some of these applications can be started after the snapshot reboot by adding 
them to the SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM file. 


4.7.4 Taking the Saved Image Snapshot (VAX Only) 
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After you have prepared your system as described in Section 4.7.3, you are ready 
to run the Snapshot facility command procedure that takes a system image 
snapshot, and then shuts down and reboots your system. The following sections 
describe this procedure. 


Starting Up and Shutting Down the System 
4.7 Reducing Rebooting Times on Nonclustered Systems (VAX Only) 


Taking the System Image Snapshot 


From a DECterm window, set host to 0 and log in to the SYSTEM account, as 
shown in the following sequence: 


S$ SET HOST 0 
Username: SYSTEM 
Password: 


Now execute the following DCL commands: 


$ SET DEF SYSSMANAGER 
$ @SNAPSHOT 


The Snapshot facility procedure will remind you of some preparations and ask 
if you want to continue; answer “YES” if you have completed the steps in the 
previous section. 


The Snapshot procedure automatically logs off. At this time, either PAUSE the 
workstation or EXIT from the current session. Note that any keystrokes that you 
type before pausing or exiting will be stored in the typeahead buffer and will be 
executed after the system has rebooted. 


Note 


You must either pause the workstation or detach or log out from any 
interactive jobs before the system image snapshot is taken. (Without 
this restriction, anyone with physical access to your workstation could 
shut down and then reboot the workstation, and then have access to the 
currently logged-in account.) 

Also note that in DECwindows Motif for OpenVMS systems, unpausing 
the screen opens SYSUAF.DAT and VMS$MAIL_PROFILE.DATA for 
write. In such a case, you will not be able to take another snapshot 
attempt until a new session has started. 


Snapshot Reboot 


After successful creation of the snapshot file, the system will enter an autoreboot 
sequence and the following messages are displayed: 


SSNAPSHOT-I-OPEN, opening the snapshot file 


$SNAPSHOT-I-RESTART, restart to follow 


If the following message is displayed, then the system image has been saved and 
the snapshot procedure is successful: 


$SNAPSHOT-S-SUCCESS, snapshot file write is complete 


If you see these audit messages, close the console window. The snapshot 
procedure is complete when the windows have been refreshed. 


If you do not see these messages, the snapshot procedure was not successful. See 
Section 4.7.5 for some hints on solving problems after an unsuccessful attempt to 
run the snapshot procedure. 
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Final Cleanup 


You might find that the creation of a good snapshot file takes several attempts in 
order to place the system in the desired state. Once a good snapshot file has been 
created, you can continue to use it as long as none of the files that were open at 
the time of the snapshot are deleted or modified. 


Create a SYS$MANAGER:SNAPSHOT$SYCLEANUP.COM from 
SYS$MANAGER:SNAPSHOT$SYCLEANUP.TEMPLATE and review this 
procedure to add any desired site-specific restart operations such as the starting 
of queues and batch jobs. You can modify this procedure after taking a valid 
system snapshot, and the saved system image will remain valid. 


4.7.5 Problem Solving When Using the Snapshot Facility (VAX Only) 
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The following sections describe some of the problems that you might encounter 
with the Snapshot facility and offer solutions. | 


Diagnosis of the snapshot problem depends on where the snapshot failed. Type 
SYS$MANAGER:SNAPSHOT$CLEANUP.LOG and look for warning or failure 
messages. 


In most instances when a system image snapshot fails, the Snapshot facility 
resets the system parameter that defines the boot style to 0, to indicate a 
traditional boot procedure. However, in some cases this parameter may not be 
reset to 0. If your system does not reboot using the traditional boot procedure, 
make sure that the BOOT_STYLE system parameter is set to 0. 


To verify and change this parameter, you must initiate a conversational boot, as 
shown in the following example: 


>>>B/1 <disk> 

SYSBOOT> SET BOOT 0 
SYSBOOT> CONT 

Common Snapshot Errors 


This section lists some of the errors that you might encounter when trying to set 
up a system image snapshot for your system. 


¢ Uncertified Images 


The following message indicates that an image active at the time of the 
system snapshot has not been previously tested with the Snapshot facility: 


%SNAPSHOT-W-NORESTART, process <pid> is not restartable and can not 
be suspended 


Such processes might cache stale data and cause subsequent system 
problems. Uncertified processes must be stopped prior to creating a snapshot 
file. 


e Open Writable Files 


Processes with open writable files are not allowed because the file can change 
between reboots. If the snapshot procedure encounters an open writable file, 
the following error message will be returned: 


$SNAPSHOT-W-WRITEFILE, process <pid> has an open writable file and 

can not be suspended 

You can use the DCL command SHOW DEVICES/FILES/NOSYSTEM to 
display the open files. Frequently, the file name (*LOG, SYSUAF.DAT, 


VMSMAIL_PROFILE.DATA) will indicate which file is writable. Processes 
with open writable files must be stopped before a snapshot is possible. 
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DECwindows workstations are a special case, because certain mail operations 
and the act of unpausing a session can cause SYSUAF.DAT and VMSMAIL_ 
PROFILE.DATA to become permanently open. In such a case, the session 
must be restarted. 


The DECwindows Motif for OpenVMS systems server occasionally opens 

its log file temporarily to write error and status messages. If a snapshot 
attempt occurs at this time, the snapshot will fail with the following error in 
SYS$MANAGER:SNAPSHOT$CLEANUP.LOG: 


%SNAPSHOT-I-NOTIFY, process 0000004F DECWSSERVER_0 being notified 
$SNAPSHOT-W-WRITEFILE, process 0000004F has an open writable file and can 
not be suspended 

%SNAPSHOT-F-PROCTIMOUT, process synchronization timeout or abort 


If this error occurs and the DECwindows Motif for OpenVMS systems 
server has not been quiescent (that is, windows have been appearing or 
disappearing), then retry the snapshot save operation. If the error still 
occurs, then issue the following DCL command to determine which files are 
open by the server and look for any log files that might be present: 


-§ SHOW DEVICES/FILES/NOSYSTEM SYSS$SYSDEVICE: 


If a log file is present, check to be sure that the exec mode symbol, 
DECW$SM_CREATE_LOG in the DECW$LOGICAL_NAMES table, is 
defined to be FALSE. 


¢ Unsupported Configurations 
You can use the Snapshot facility only on workstations that are not in a 
VAXcluster configuration. 

¢ Incomplete Notification 


The Snapshot facility procedure relies on an AST notification mechanism to 
signal other processes of an impending shutdown and subsequent restart. 
Some images, such as DECW$TERMINAL_CREATE (activated by the DCL 
command CREATE/TERMINAL), remain in a higher mode and prevent 
deliveries of these ASTs. In such cases, the following status notice may 
appear in the log after a process synchronization timeout: 


tSNAPSHOT-I-PROCSTATUS, process <pid> is signaling an abort. 


Such processes must be stopped before the creation of a snapshot file is 
possible. 


e File Size Problems 


The system snapshot software creates a snapshot file automatically. 
Occasionally, the allocation for this file is incorrect, and the following error is 
generated: 


$SNAPSHOT-F-INSUFBLOCKS, insufficient blocks in the snapshot file 


A related problem is a device allocation failure (RMS Device Full) during the 
attempt to create the snapshot file. 


In these cases, the snapshot software must guess at the file size because the 
file system is shut down at the time that the file is written. The more use 
the system has before the snapshot is taken, the more fragmented memory 
becomes and there is a higher chance that the guess will be wrong. 
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One solution is to manually create or extend the snapshot file. The 
%SNAPSHOT-I-FILESTATS message gives the needed file size, and the 
following SYSGEN command can perform the actual file creation: 


$ RUN SYSSSYSTEM:SYSGEN 
SYSGEN> CREATE SYS$LOADABLE IMAGES: SNAPSHOT.SYS/SIZE=blocks 


¢ Disk Space 


The availability of a faster system startup procedure may tempt you to bypass 
the normal shutdown procedures. In such a case, disk space may eventually 
disappear and the system is unable to restart completely. 


Always perform a normal system shutdown, or recover disk space by 
rebuilding the disks periodically with the DCL command SET VOLUME 
/REBUILD. Note that the solution to this problem does not require the 
creation of a system snapshot file. 


¢ No Batch Jobs Or Queues On Restart 


Because the queue manager has an open writable file, the snapshot procedure 
must stop all batch jobs and shut down the queue manager. To restart 
these queue files, edit the SYSSMANAGER:SNAPSHOT$SYCLEANUP.COM 
procedure and add the queue commands appropriate for your system. 


If the snapshot has hung, attempt to force a crash dump. Refer to your system 
hardware documentation for instructions on forcing a crash dump. 


If the dump does not take place, reboot using a conversational boot and retry the 
snapshot with the following command line: 


$ @SNAPSHOT DEBUG TRUST DUMP 


The TRUST_DUMP parameter indicates that you will not attempt to extend or 
delete the system dump file and the snapshot image can always trust the original 
system dump file mapping information in the boot control block. The DEBUG 
parameter turns off the snapshot watchdog timeout mechanism in case DELTA or 
XDELTA is in use. Note that TRUST_DUMP has an effect only if the snapshot 
file is on the system disk. 


After the dump file write attempt is complete, you must boot normally by 
executing a conversational boot and setting BOOT_STYLE to 0, as shown in 
the following example: 


>>>B/1 <disk> 
SYSBOOT> SET BOOT 0 
SYSBOOT> CONT 


(Note that the SYSGEN parameter BOOT_STYLE is automatically set to 1 by 
the Snapshot command procedure. When BOOT_STYLE is 1, an attempt to boot 
the system using a system image snapshot is used; when BOOT_STYLE is 0, 
the system boot is handled in the traditional manner, with no system image 
snapshot.) 


Once the system is completely up, you can then analyze the crash dump using the 
SHOW SNAPSHOT command in the System Dump Analyzer utility, as follows: 


$ SET DEFAULT SYSSSYSTEM 
$ ANALYZE/CRASH SYSDUMP.DMP 
SDA> SHOW SNAPSHOT 
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When a New System Image Snapshot Is Needed 

Once you create a successful snapshot image file, you can boot your system using 
that system image snapshot until any of the following events take place on your 
system: 


¢ Memory Configuration Changes 
e Expired Licenses 

¢ Open files that have changed 

e Changes in disk configuration 


In most cases, if you try to reboot your system after one of these changes 

and the BOOT_STYLE parameter in SYSGEN is set to 1, you will incur an 
error. Recovery from these errors usually requires a conversational system boot 
(changing the BOOT_STYLE parameter to 0, and then continuing with a normal 
boot), followed by the creation of a new snapshot file. ¢ 


4.8 Shutting Down the System 


The operating system provides the following shutdown procedures: 


For More 
Procedure Purpose Information 


SHUTDOWN.COM An orderly shutdown procedure. This procedure Section 4.8.1 
shuts down the system while performing 
housekeeping functions such as disabling future 
logins, stopping the batch and output queues, 
dismounting mounted volumes, and stopping 
user processes. 


OPCCRASH.EXE An emergency shutdown program. Run the Section 4.8.5 
OPCCRASH emergency shutdown program if 
you are unable to perform an orderly shutdown 
with SHUTDOWN.COM. 


CRASH.COM An emergency shutdown procedure. Use this Section 4.8.6 
emergency shutdown procedure if OPCCRASH 
fails. Note that not all VAX and AXP systems 
have the CRASH procedure. If your system 
has the CRASH procedure, it is located on the 
console media, and it can only be executed from 
the console terminal. 


4.8.1 Performing an Orderly Shutdown with SHUTDOWN.COM 


Use SYS$SYSTEM:SHUTDOWN.COM to shut down the system in an orderly 
fashion. See Section 4.8.2 for the order of shutdown events. 


Do not modify SHUTDOWN.COM. To perform site-specific operations during 
shutdown, see Section 4.8.3. 


Ordinarily, you shut down the system from the SYSTEM account, which includes 
all privileges by default. To execute SHUTDOWN.COM, you must have either the 
SETPRV privilege or all of the following privileges : 


e On AXP systems, CMKRNL, EXQUOTA, LOG_IO, NETMBX, OPER, PHY_ 
IO, SECURITY, SYSNAM, SYSPRV, TMPMBX, and WORLD. 
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On VAX systems, AUDIT CMKRNL, EXQUOTA, LOG_IO, NETMBX, OPER, 
SECURITY, SYSNAM, SYSPRV, TMPMBX, and WORLD. 


You can cancel a shutdown without any side effects by pressing Ctrl/Y before 
SHUTDOWN.COM displays the following message: 


$SHUTDOWN-I-SITESHUT, The site-specific shutdown procedure will now be invoked. 


If you press Ctrl/Y after this display, certain system components might have 
already been shut down, and you will need to recover manually. For example, you 
might have to manually restart processes, mount disks, or reboot the system. 


How to Perform This Task 


1. 


Log in to the system manager’s account (SYSTEM), or any privileged account, 
and enter the following command: 


$ @SYSSSYSTEM: SHUTDOWN .COM 


This command invokes the orderly shutdown procedure. The procedure 
prompts you with a series of questions and messages. The default responses 
appear in brackets at the end of each question. Press the Return key to select 
the default response. 


The system displays the following question: 
How many minutes until final shutdown [0]? 


Enter an integer. If you have defined the system logical name 
SHUTDOWN$MINIMUM_MINUTES, its integer value is the minimum 
value that you can enter. For example, if the logical name is defined as 10, 
you must specify at least 10 minutes to final shutdown or an error message 
is returned. If you do not enter a value, SHUTDOWN.COM uses the logical 
name value. 


Caution 


The default is 0 minutes. If you have not defined the logical name 
SHUTDOWN$MINIMUM_MINUTES, and you do not enter a value, 
the system will be shut down immediately after the last question has 
been answered. 


The system displays the following question: 
Reason for shutdown [standalone]: 


Enter a one-line reason for shutting down the system. For example, “Monthly 
preventive maintenance.” 


The system displays the following question: 
Do you want to spin down the disk volumes [No]? 


Enter YES or NO (Y or N). Note, however, that you cannot spin down the 
system disk. 


The system displays the following question: 
Do you want to invoke the site-specific shutdown procedure [Yes]? 


If you have entered site-specific commands in SYSHUTDWN.COM, press 
the Return key to accept the default answer, YES. For more information, see 
Section 4.8.3.2. 
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6. The system displays the following question: 
Should an automatic system reboot be performed [No]? 


By default, the system does not automatically reboot. However, if you respond 
YES, the system attempts to reboot automatically when the shutdown is 
complete. For example, you would specify YES if you are rebooting the 
system after modifying values for nondynamic system parameters with 
SYSMAN or SYSGEN. (When you change nondynamic system parameters, 
you must reboot the system for the new values to take effect.) 


7. The system displays a question similar to the following: 
When will the system be rebooted [later]? 
If you entered YES in step 6, the default answer to this question is “[shortly 
via automatic reboot]”. 


Press Return to take the default, or enter the expected reboot time in the 
format you want users to see. For example, you could specify IMMEDIATELY, 
or IN 10 MINUTES, or a time such as 2 P.M. or 14:00. If you do not know 
when the system will be available again, press Return to specify “later” as the 
time when the system will reboot. 


8. The procedure prompts you to specify one or more shutdown options, as 
follows (Gif your system is not a member of a VMScluster environment, the 
procedure lists only the REBOOT_CHECK and SAVE_FEEDBACK options): 


Shutdown options (enter as a comma-separated list): 


REMOVE NODE Remaining nodes in the cluster should adjust quorum 
CLUSTER_SHUTDOWN Entire cluster is shutting down 

REBOOT CHECK Check existence of basic system files 

SAVE_ FEEDBACK Save AUTOGEN feedback information from this boot 


DISABLE AUTOSTART Disable autostart queues 
Shutdown options [NONE] 


Specify the options you want to use. Choose from the following: 


Option Description 


REMOVE_NODE Notifies users on all other VMScluster member nodes. 


Clusterwide notification is required because users 
logged in to any member system can be affected 
by the shutdown of another system. For example, 
users might have batch jobs running on other 
systems, or, in terminal server environments, users 
might have alternate sessions in progress on the 
system being shut down. 


CLUSTER_SHUTDOWN Shuts down an entire VMScluster environment. 


REBOOT_CHECK Verifies the presence of files necessary to reboot the 
system after shutdown completes. 


The procedure checks for the necessary files and 
notifies you if any are missing. Replace missing 
files before proceeding. 
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Option Description 


SAVE_FEEDBACK Records feedback data collected from the system since 
it was last booted and creates a new version of the 
AUTOGEN feedback data file, which AUTOGEN can 
use the next time it runs. 


For detailed information on using the AUTOGEN 
feedback mechanism, see Section 14.4.1. 


DISABLE_AUTOSTART Specifies the time interval between the DISABLE 
AUTOSTART/QUEUES command and system 
shutdown. For more information, see Section 13.9.1.18. 


Example 


$ @SYSSSYSTEM: SHUTDOWN 


SHUTDOWN -- Perform an Orderly System Shutdown 


How many minutes until final shutdown [0]: 10 

Reason for shutdown: [Standalone] MONTHLY PREVENTIVE MAINTENANCE 

Do you want to spin down the disk volumes [No]? [Retum] 

Do you want to invoke the site-specific shutdown procedure [Yes]? |Retum] 


Should an automatic system reboot be performed [No]? [Return] 


When will the system be rebooted [later]? 12:30 
Shutdown options (enter as a comma-separated list): 


REMOVE_NODE Remaining nodes in the cluster should adjust quorum 
CLUSTER_SHUTDOWN Entire cluster is shutting down 

REBOOT CHECK Check existence of basic system files 

SAVE FEEDBACK Save AUTOGEN feedback information from this boot 


DISABLE AUTOSTART Disable autostart queues 
Shutdown options [NONE] [Retum] 


SHUTDOWN message on AVALON, from user SYSTEM at AVALONSOPAO: 12:00:00.20 
AVALON will shut down in 10 minutes; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 


¢SHUTDOWN-I-OPERATOR, This terminal is now an operator's console. 
$%%$%$33SS%% OPCOM, 16-JUL-1994 12:01:00.15 %33%%33%%%%% 

Operator status for Operator AVALONSOPAO: 

CENTRAL, PRINTER, TAPES, DISKS, DEVICES, CARDS, NETWORK, OPER1, OPER2, 
OPER3, OPER4, OPER5S, OPER6, OPERT, OPERS, OPER, OPER10, OPER11, 
OPER1? 


$SHUTDOWN-I-DISLOGINS, Interactive logins will now be disabled. 
$SET-I-INTSET, login interactive limit = 0 current interactive value = 17 
%SHUTDOWN-I-SHUTNET, The DECnet network will now be shut down. 


SHUTDOWN message on AVALON, from user SYSTEM at AVALONSOPAQ: 12:05:00.20 
AVALON will shut down in 5 minutes; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 


17 terminals have been notified on AVALON. 


SHUTDOWN message on AVALON from user SYSTEM at AVALONSOPAQ: 12:06:55.28 
AVALON will shut down in 3 minutes; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 
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$%$%3%33%333%S OPCOM, 16-JUL-1994 12:07:12.30 %%%%%333333 

Message from user DECnet on AVALON 

DECnet event 2.0, local node state change 

From node 2.161 (AVALON), 16-JUL-1994 12:07:22.26 

Operator command, Old state = On, New state = Shut 

SHUTDOWN message on AVALON user SYSTEM at AVALONSOPA0: 12:08:12.56 

AVALON will shut down in 2 minutes; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 


$$%S3%S3S3%% OPCOM, 16-JUL-1994 12:08:12:30 %%%%3%3%3%3%% 
Message from user JOB CONTROL on AVALON 
-SYSTEM-S-NORMAL, normal successful completion 


$3333$3333% OPCOM, 16-JUL-1994 12:08:42.30 %%%%333%33%3%3 
Message from user DECNET on AVALON 
DECnet shutting down 


SHUTDOWN message on AVALON, from user SYSTEM at AVALONSOPAO: 12:09:00.20 
AVALON will shut down in 1 minute; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 


%SHUTDOWN-I-STOPQUEMAN, The queue manager will now be stopped. 

SHUTDOWN message on AVALON from user SYSTEM at AVALONSOPAO: 12:09:12.56 
AVALON will shut down in 1 minute; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 


17 terminals have been notified on AVALON 

tSHUTDOWN-I-SITESHUT, The site-specific shutdown procedure will now be invoked. 
SSHUTDOWN-I-STOPUSER, All user processes will now be stopped. 
SSHUTDOWN-I-REMOVE, All installed images will now be removed. 
$SHUTDOWN-I-DISMOUNT, All volumes will now be dismounted. 

$3%%33%3%333% OPCOM, 16-JUL-1994 12:09:42.30 %%%%%%%3%%3% 

Message from user System on AVALON 

_AVALONSOPA0:, AVALON shutdown was requested by the operator. 


SHUTDOWN message on AVALON, from user SYSTEM at AVALONSOPAQO: 12:10:00.20 
AVALON will shut down in 0 minutes; back up 12:30. Please log off node AVALON. 
MONTHLY PREVENTIVE MAINTENANCE 


m4 


$33333%3%3 OPCOM, 16-JUL-1994 12:10:02.44 %3%3%3%333 
Logfile was closed by operator AVALONSOPAQ: 
Logfile was SYSS$SYSROOT: [SYSMGR]OPERATOR.LOG;8 


$%3%333%33333_~ OPCOM, 16-JUL-1994 12:10:32.20 %%%%%%%%%%% 
Operator “AVALONSOPAO: has been disabled, username SYSTEM 


SYSTEM SHUTDOWN COMPLETE - USE CONSOLE TO HALT SYSTEM 


4.8.2 Understanding the Order of Shutdown Events 


The following events occur as the shutdown proceeds. The procedure displays the 
corresponding messages on the terminal. 


1. At decreasing time intervals, SHUTDOWN.COM broadcasts, to all users on 
the system, a message requesting users to log out. 


2. SHUTDOWN.COM defines the system logical name SHUTDOWN$TIME 
to be the absolute time of shutdown. For example, if you execute 
SHUTDOWN.COM, and at 12:00 you specify the value 10 in response 
to the first question, SHUTDOWN defines the logical name to be 12:10 
on that day. To see if a shutdown is in progress or to determine the 
actual time of shutdown, you can enter the command SHOW LOGICAL 
SHUTDOWNS$TIME. This feature is useful if you miss a shutdown broadcast 
message. 
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10. 
11. 


12. 


At 6 minutes or less before system shutdown, the terminal from which you 
invoked SHUTDOWN becomes an operator’s console. SHUTDOWN disables 
all future nonoperator logins and shuts down the DECnet network if it is 
running. At this point, users logged in to the system with the SET HOST 
command lose their sessions. 


One minute before shutdown, SHUTDOWN.COM stops batch and output 
execution queues and stops the queue manager. 


At the absolute time of shutdown, SHUTDOWN.COM invokes the site-specific 
shutdown command procedure SYS$+MANAGER:SYSHUTDWN.COM, if you 
requested it. 


SHUTDOWN.COM stops all remaining user processes; however, system 
processes continue. Ancillary control processes (ACPs) might delete 
themselves when their mounted volumes are finally dismounted. 


On multiprocessor systems, SHUTDOWN.COM stops the secondary 
processors. 


SHUTDOWN.COM removes all installed images. 


SHUTDOWN.COM dismounts all mounted volumes and, if you requested it, 
spins down the disks. If you defined SHUTDOWN$VERBOSE, the proceaute 
lists each disk as it is dismounted. 


The procedure does not spin down the system disk, nor does it dismount or 
spin down the quorum disk (if one exists on your system). 


SHUTDOWN.COM closes the operator log file. 


SHUTDOWN.COM invokes the program SYS$SYSTEM:OPCCRASH to shut 
down the system. 


If you requested an automatic reboot, the system reboots, provided you set 
the necessary controls. You requested an automatic reboot if you answered 
YES to the following question: 


Should an automatic system reboot be performed [No]? 


If you did not request an automatic reboot, a message similar to the following 
appears on the system console: 


SYSTEM SHUTDOWN COMPLETE - USE CONSOLE TO HALT SYSTEM 


On VAX systems, halt the system after you see this message. ¢ 


4.8.3 Customizing SHUTDOWN.COM to Perform Site-Specific Operations 
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In addition to choosing shutdown options when you execute SHUTDOWN.COM, 
you can customize SHUTDOWN.COM to meet the needs of your site in the 
following ways. 


Method For More Information 
Defining logical names Section 4.8.3.1 
Modifying the site-specific shutdown command procedure Section 4.8.3.2 
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4.8.3.1 Defining Logical Names 


Before executing SHUTDOWN.COM, you can define the following logical names 
to control the command procedure’s operations: 


Logical Name Description 


tSHUTDOWN$DISABLE_AUTOSTART On VAX systems, specifies the number 
of minutes between the time autostart is 
disabled for queues and the time the system 
is shut down. For more information, see 
Section 13.9.1.13. 


SHUTDOWN$INFORM_NODES Specifies a list of VMScluster nodes to be 
notified when the system is shutting down. 
This logical name is described in detail in 
this section. 


SHUTDOWN$MINIMUM_MINUTES Defines the minimum number of minutes 
you can specify as number of minutes 
to shutdown. For example, if your users 
require 30 minutes notice before a system 
shutdown, define this logical name to “30”. 


SHUTDOWN$STIME Defines the absolute time of shutdown. 


SHUTDOWN$VERBOSE If defined to any string, specifies that the 
shutdown command procedure is to list each 
disk as it is dismounted. 


¥VAX specific 


If you plan to use an option every time you use SHUTDOWN.COM, define the 
logical name in the site-specific startup command procedure SYLOGICALS.COM. 
For more information, see Section 5.2.5. 


Specifying a List of Nodes to Be Notified When the System Is Shutting Down 


You can define the logical name SHUTDOWN$INFORM_NODES to be 
a list of VMScluster node that are notified when the system is shut 
down.You must define SHUTDOWN$INFORM_NODES before executing 
SYS$SYSTEM:SHUTDOWN.COM. 


To define SHUTDOWN$INFORM_NODES, enter a command in the following 
format: 


DEFINE SHUTDOWNS$INFORM_NODES "node-list" 
For node-list, specify the list of nodes to be informed. For example: - 
$ DEFINE SHUTDOWNS$ INFORM NODES "NODE1,NODE2 ,NODE3" 


If you plan to inform the same nodes every time you shut down the system, add 
the command to the site-specific startup command procedure SYLOGICALS.COM. 
For more information, see Section 5.2.5. 


If you define SHUTDOWN$INFORM_NODES, all member nodes included in 
the list are notified when you execute SHUTDOWN.COM. Users on the node 
that is being shut down are always notified, regardless of whether you define 
SHUTDOWN$INFORM_NODES. If you omit the name of the node that is being 
shut down from the list specified in the DEFINE command, SHUTDOWN.COM 
automatically adds the name to the list. 
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The following information indicates what nodes are notified at different phases of 
the shutdown sequence, depending on whether SHUTDOWN$INFORM_NODES 
is defined. 


If 

SHUTDOWNSINFORM_ If 

NODES SHUTDOWNSINFORM_NODES 
Shutdown Phase Is Not Defined Is Defined 
First shutdown Notify all terminals Notify all terminals 
notification on all nodes on all listed nodes 
Between first Notify all terminals Notify all users logged 
shutdown logged in to the node in on all listed nodes 
notification and 2 that is shutting down 
minutes before 
final shutdown 
Between two Notify all users logged Notify all users 
minutes before in on all nodes logged in on all listed nodes 
final shutdown 
notification until 
final shutdown 
Shutdown canceled Notify all terminals Notify all terminals 

on all nodes on all listed nodes 


4.8.3.2 Modifying the Site-Specific Shutdown Command Procedure 


You can add site-specific commands to the site-specific shutdown procedure 
SYS$MANAGER:SYSHUTDWN.COM. An empty SYSHUTDWN.COM file is 
included in your distribution kit. 


SHUTDOWN.COM prompts you to indicate if you want to execute the site-specific 
procedure SYSHUTDWN.COM: 


Do you want to invoke the site-specific shutdown procedure [Yes]? 


To invoke the site-specific procedure, press the Return key to accept the default 
answer YES. 


4.8.4 Performing an Orderly Shutdown with the System Management Utility 
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(SYSMAN) 


The advantage of using SYSMAN for shutdown is that you can shut down a 
group of nodes quickly. SYSMAN enables you to enter all of the shutdown 
parameters in one command line, rather than responding to the interactive dialog 
in SHUTDOWN.COM. SYSMAN does not wait for the nodes to shut down before 
you can use other SYSMAN commands; the interface returns immediately. 


How to Perform This Task 

1. Enter the following command at the $ prompt: 
$ RUN SYSSSYSTEM: SYSMAN 

2. At the SYSMAN> prompt, enter the following command: 
SYSMAN> SHUTDOWN NODE/[ qualifier] 
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4.8 Shutting Down the System 


Qualifiers can be any of the following options: 


Qualifier 


MINUTES_TO_SHUTDOWN 
REASON 

REBOOT_TIME 
[NO]JSPIN_DOWN_DISKS 
[NOJINVOKE_SHUTDOWN 
[NOJAUTOMATIC_REBOOT 
[NO]JREBOOT_CHECK 
[LNO]JCLUSTER_SHUTDOWN 


[NOJREMOVE_NODE 


[NO]JSAVE_FEEDBACK 


Example 


$ RUN SYSSSYSTEM: SYSMAN 


Function 


Indicates the number of minutes until shutdown 
occurs. 


Indicates the reason for the shutdown. 


Indicates the time you expect to reboot the system, 
such as LATER, 2 P.M., or 14:00. This time is 
displayed in the shutdown message to users. 


Spins down disks. The default is NO. You cannot 
spin down the system disk. 


Invokes the site-specific shutdown procedure. The 
default is NO. 


Reboots the system automatically when the 
shutdown is complete. The default is NO. 


Checks for basic operating system files and notifies 
you if any are missing. The default is NO. 


Shuts down the entire VMScluster. The default is 


Removes the node from the active cluster quorum; 
use this when you do not expect the shut-down 
node to rejoin the cluster for an extended period. 
The default is NO. 


Records feedback data from the system since it 
was last booted and creates a new version of the 
AUTOGEN feedback data file, which you can use 
the next time you run AUTOGEN. The default is 
NO. 


SYSMAN> SHUTDOWN NODE/MINUTES TO SHUTDOWN=10/REBOOT TIME="later" - 
_SYSMAN> /REASON="DISK CORRUPTION PROBLEMS" /REBOOT CHECK/SAVE_FEEDBACK 


If you enter this command example on NODE21, it requests a shutdown on 


NODE21 with: 


e A message to users on all the cluster nodes, specifying: 


SHUTDOWN message on node NODE21, from user SYSTEM at NODE21$0PA0: 
12:00:00:20. NODE21 will shut down in 10 minutes; back up later. 
Please log off node NODE21. DISK CORRUPTION PROBLEMS 


¢ Acheck for any missing operating system files and notification if there are 


any missing 


e Creation of anew AUTOGEN feedback data file based on the feedback data 
collected since the system was last booted 


For more information, see the OpenVMS System Management Utilities Reference 


Manual. 
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4.8.5 Performing an Emergency Shutdown with OPCCRASH 
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Ordinarily, you shut down the system using the orderly shutdown procedure 
SHUTDOWN.COM. In an emergency, if you cannot use SHUTDOWN.COM you 
can execute OPCCRASH.EXE to shut down your system immediately without 
performing any of the housekeeping functions that ensure an orderly shutdown. 


Note 
Use the OPCCRASH procedure only if SHUTDOWN.COM fails. 


After SHUTDOWN.COM performs orderly housekeeping tasks, it invokes the 
program SYS$SYSTEM:OPCCRASH to shut down the system. OPCCRASH 
performs only the following minimal housekeeping functions: 


e Writes the modified page list back to disk. This ensures that all writable 
section files are updated to their correct state before the system crashes and 
all in-memory data is lost. 


¢ Unless the logical name OPC$NODUMP is defined, creates a crash dump by 
writing physical memory to the system dump file. For more information on 
the system dump file, see Section 15.1. 


To perform this procedure, you must have the CMKRNL privilege. You can enter 
the commands from any terminal and any privileged account. 


How to Perform This Task 
1. Log in to any privileged account. 
2. Enter the following command: 

$ RUN SYSSSYSTEM:OPCCRASH 


3. Ifthe system fails to respond after a few minutes, use the CRASH procedure 
or, if your system does not have a CRASH procedure, enter the emergency 
shutdown commands described in one of the following manuals: 


¢ On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 

4. A message similar to the following is displayed at the console: 
SYSTEM SHUTDOWN COMPLETE - USE CONSOLE TO HALT SYSTEM 
On VAX systems, halt the system when you see a similar display. ¢ 


Example 


The following example runs the OPCCRASH program to force a system crash, 
and halts the system: 


$ RUN SYSS$SYSTEM:OPCCRASH 
SYSTEM SHUTDOWN COMPLETE - USE CONSOLE TO HALT SYSTEM 


Ctri/P 
>>>HALT 


HALTED AT 8000708A 
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4.8.6 Performing an Emergency Shutdown with CRASH 


Certain computers have an additional emergency shutdown command procedure 
named CRASH.COM. Use this emergency shutdown procedure if OPCCRASH 
fails. Note that not all systems have the CRASH emergency shutdown procedure. 
If your computer has the CRASH procedure, it is located on the console 

media, and it can be executed only from the console terminal. See one of the 
following manuals for a description of the CRASH procedure or for the equivalent 
commands to use to force an abrupt emergency shutdown: 


¢ On VAX systems, see the upgrade and installation supplement for your VAX 
computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 
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Customizing the Operating System 


After you have installed the operating system, you can customize it for 
site-specific requirements. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 


Adding and deleting optional files with the OpenVMS Tailoring utility Section 5.1 


Modifying site-specific startup command procedures Section 5.2 
Modifying login command procedures Section 5.3 . 
Customizing startup databases Section 5.4 
Registering images that have system version dependencies Section 5.5 
Customizing the Help Message utility (Help Message) Section 5.6 
{Setting up your system to compensate for time zones Section 5.7 
Saving your customization Section 5.8 
VAX specific 


This chapter explains the following concepts: 


Concept Section 

Site-specific startup command procedures Section 5.2.1 
The order of startup events Section 5.2.2 
Startup databases Section 5.4.1 
The layered product startup database Section 5.4.2 


5.1 Adding and Deleting Optional Files with the OpenVMS Tailoring 
Utility 

The OpenVMS Tailoring utility (VMSTAILOR) lets you customize the size of the 
operating system by deleting or adding optional system files. This is particularly 
valuable for small systems or systems with limited disk space. For example, if 
your system is a MicroVAX II computer with an RD54 system disk, and you will 
not use system programming features such as the Delta/XDelta utility or the 
System Dump Analyzer utility, you might choose to remove these files from the 
system disk. 


J 


You delete files from and add files to the system disk by identifying classes and 
subclasses of operating system files that you want to add or delete. You might 
delete or add an entire class or selected subclasses of files within a class. 


5-1 


Customizing the Operating System 
5.1 Adding and Deleting Optional Files with the OpenVMS Tailoring Utility 


If you delete optional files with VMSTAILOR, you can add them again at any 
time using VMSTAILOR and your operating system distribution media. 


See the Upgrade and Installation Manual for more information about 


VMSTAILOR. 


5.2 Modifying Site-Specific Startup Command Procedures 


An important part of customizing your system is to create or modify site-specific 
startup command procedures. Adding commands to these procedures ensures 
that the commands are executed each time the system reboots. 


5.2.1 Understanding Site-Specific Startup Command Procedures 


You should understand the following terms: 
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Term 


Startup command procedure 


Site-independent startup 
command procedure 


Site-specific startup 
command procedures 


Definition 


A command procedure that executes when the system 
starts up. 


A startup command procedure that is required for and 
provided with all OpenVMS systems, regardless of 
site-specific requirements. This procedure is named 
SYS$SYSTEM:STARTUP.COM. Do not modify this 
procedure. 


When your system boots, it automatically executes 
STARTUP.COM. For more information, see 
Section 4.1.3. 


Startup command procedures that you can modify to 
perform operations specific to your site. Use any text 
editor to add or modify commands in these procedures. 


STARTUP.COM executes several site-specific startup 
command procedures that Digital provides. These 
procedures are listed in Table 5-1. 


You can also create your own procedures and execute 
them from SYSTARTUP_VMS.COM. 


Table 5-1 lists and describes the site-specific startup command procedures 
provided by Digital, in the order in which they execute. These procedure are 
located in the system directory with the logical name SYS$STARTUP. 


Table 5-1 Site-Specific Startup Command Procedures 


Order Command Procedure Function 


1 SYCONFIG.COM 


2 SYLOGICALS.COM 


A file to which you add commands for site- 
specific device configuration. For more 
information, see Section 5.2.4. 


A file to which you add commands to define 
your site-specific system logical names. For 
more information, see Section 5.2.5. 


(continued on next page) 
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Table 5—1 (Cont.) Site-Specific Startup Command Procedures 


Order Command Procedure Function 


3 


SYPAGSWPFILES.COM A file to which you add commands to install 
page and swap files (other than the primary 
page and swap files in SYS$SYSTEM, 
which are installed automatically). For 
more information, see Section 5.2.3. 


SYSECURITY.COM A file to which you add commands to define 
the location of security auditing and security 
archive files before starting the security 
auditing server. For more information, see 
Section 5.2.6. 


SYSTARTUP_VMS.COM A general-purpose command procedure 
to which you add commands to perform 
miscellaneous operations for setting up your 
site. For example, you might mount public 
disks in SYSTARTUP_VMS.COM. For more 
information, see Section 5.2.7. 


Template Files 


Your distribution kit provides two versions of each site-specific command 
procedure in the directory SYS$MANAGER: 


An executable version with the file type .COM (for example, 
SYS$MANAGER:SYCONFIG.COM). The system executes files with the 

file type .COM; you can edit .COM files (except for STARTUP.COM) to meet 
your site-specific needs. 


A backup version with the file type .TEMPLATE (for example, 
SYS$MANAGER:SYCONFIG.TEMPLATE). 


Caution 


Do not modify or delete the Digital-supplied template command files with 
the .TEMPLATE file type. The VMSKITBLD.COM procedure uses these 
files to create a new system disk. If you need to use the .TEMPLATE 
version of the file because your .COM version is damaged, copy the 
.TEMPLATE file to a file with the .COM file type, and edit the copy. 


Rules for Modifying Startup Command Procedures 


When modifying site-specific startup command procedures, be sure to follow these 
rules: 


Conform to the rules of command procedures, as described in the OpenVMS 
User’s Manual. 


Keep the files in the SYS$SMANAGER directory. 
Keep the file names given to the command procedures. 


Modify only the executable version of the files (with the file type .COM), not 
the template version (with the file type .TEMPLATE). 


Do not modify the site-independent startup command procedure 
STARTUP.COM. 
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¢ Before modifying command procedures, understand the order of startup 
events. For information, see Section 5.2.2. 


Caution 


The startup procedures provided by Digital should always work. However, 
if you introduce an error in the startup or login procedures, it is possible 
to accidentally lock yourself out of the system. Section 4.3.2 describes a 
boot procedure to be used in such an emergency. 


5.2.2 Understanding the Order of Startup Events 
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Before modifying the site-specific startup command procedures, you need to 
understand the order of system startup events. 


A database file named VMS$PHASES.DAT determines the order of the phases of 
the startup procedure. It is a sequential list of the phases that STARTUP.COM 
starts. It includes a series of four basic phases (INITIAL, CONFIGURE, DEVICE, 
and BASEENVIRON) needed to start the operating system, followed by a series 
of phases for layered products. 


- Caution 


Do not modify VMS$PHASES.DAT. The system requires the contents of 
this file to remain intact to start up correctly. 


On starting up, a system performs tasks in the following order: 


1. Defines logical names needed for basic operations, and installs images listed 
in SYS$MANAGER:VMSIMAGES.DAT. 


2. Executes SYCONFIG.COM. 
Adds any new drivers by executing one of the following commands: 


— On VAX systems, the SYSGEN command AUTOCONFIGURE ALL. This 
command automatically configures the device driver database, locates all 
standard devices attached to the system, and loads and connects their 
device drivers. ¢ 


— On AXP systems, the SYSMAN command IO AUTOCONFIGURE. This 
command automatically configures the device driver database, locates all 
standard devices attached to the system, and loads and connects their 
device drivers. ¢ 


If the symbol STARTUP$AUTOCONFIGURE_ALL is defined as 0 or FALSE 
by SYS$MANAGER:SYCONFIG.COM, this step is not performed. 


4. Installs the primary swap file, if the file is present. 


Starts the CONFIGURE process (swappable). If the system parameter 
NOAUTOCOMNFIG is set to 1, the CONFIGURE process is not started. If 
the symbol STARTUP$AUTOCONFIGURE_ALL is defined as 0 or FALSE by 
SYS$MANAGER:SYCONFIG.COM, this step is not performed. 


6. Executes SYLOGICALS.COM. At this point, all devices have been made 
available through the AUTOCONFIGURE ALL command (step 3) or will be 
made available by the CONFIGURE process (started in step 5). 
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7. Ifthe system is a satellite node in a VAXcluster or VMScluster environment, 
executes SATELLITE_PAGE.COM to install page and swap files on a 
local disk. SATELLITE_PAGE.COM is created when you execute the 
CLUSTER, CONFIG.COM procedure. 


Executes SYPAGSWPFILES.COM. 
9. Performs the following steps in no specified order: 
¢ Installs required images 


e Starts various operating system processes (OPCOM, CACHE_SERVER, 
CLUSTER_SERVER, ERRFMT, JOBCTL) 


e Executes SYSECURITY.COM and starts the AUDIT_SERVER process 


e Starts the License Management facility (LMF) and loads all appropriate 
Product Authorization Keys (PAKs) from the LMF database 


10. Performs the following steps in no specified order: 
e Enables operator consoles and the operator log files 


e Starts the SMISERVER process 


Note 


The order of events within system startup might change in future releases 
of the operating system. 


5.2.3 Modifying SYPAGSWPFILES.COM to Install Page and Swap Files 


When the system boots, it automatically installs the primary page and swap 
files if they exist in the SYS$SYSTEM directory. If you have moved the page 
and swap files out of SYS$SYSTEM, or if you have secondary page and swap 
files located on a disk other than the system disk, you must make sure they are 
installed each time the system boots. To install these files, add commands to 
SYPAGSWPFILES.COM. 


Before performing this task, you should understand page and swap files and why 
you might want to move them. For more information, see Section 15.2. 


The SYPAGSWPFILES.COM file can also include commands other than INSTALL 
commands, such as SYSGEN CREATE commands and the DCL commands 
INITIALIZE and MOUNT, to set up the page and swap files. Note that, at 

the time STARTUP.COM invokes SYPAGSWPFILES.COM, only the system 

disk is mounted. Therefore, you might need to add MOUNT commands to 
SYPAGSWPFILES.COM to mount the disks that hold the page and swap files. 


The system must have installed at least one page file before 
SYPAGSWPFILES.COM exits. Otherwise, STARTUP.COM displays the following 
error message: 


SSTARTUP-E-NOPAGFIL, no page files have been successfully installed. 


Caution 


If a system dump file with the name SYSDUMP.DMP does not exist 
in the SYS$SPECIFIC:[SYSEXE] directory, the primary page file 
PAGEFILE.SYS must exist in SYS$SPECIFIC:[SYSEXE]PAGEFILE.SYS 
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for writing crash dumps.) If neither SYSDUMP.DMP nor PAGEFILE.SYS 
is located in SYS$SPECIFIC:[SYSEXE], no crash dump file is produced. 


You can also use SATELLITE_PAGE.COM to install page and swap files on a 
satellite node’s local disk. SATELLITE_PAGE.COM is created when you run 

CLUSTER_CONFIG.COM. For more information on installing page and swap 
files on a satellite node’s local disk, see VMScluster Systems for OpenVMS. 


How to Perform This Task 


1s 


Enter SYSGEN CREATE commands in the following format to create 
secondary system files in the desired locations: 


CREATE file-spec/SIZE=block-count 
For example: 


SYSGEN> CREATE DUA2:[PAGE SWAP ]PAGEFILE_1.SYS/SIZE=100000 
SYSGEN> CREATE DUA2:[PAGE SWAP]SWAPFILE_1.SYS/SIZE=100000 


The SYSGEN CREATE command creates or extends files that can be used as 
a page, swap, or dump file. You create these files only once. 


For more information on creating page and swap files, see Section 15.11. For 
more information on the SYSGEN command CREATE, see the OpenVMS 
System Management Utilities Reference Manual (SYSGEN). 


Invoke any editor to edit SYSSMANAGER:SYPAGSWPFILES.COM. 


If necessary, add a MOUNT command to mount the disk or disks that are 

to hold the secondary page and swap files. Disks other than the system 

disk are not yet mounted at the time SYPAGSWPFILES.COM is invoked. For 
information on the MOUNT command, see the OpenVMS System Management 
Utilities Reference Manual (MOUNT). 


Add the following command to make it easier to invoke SYSGEN: 
$ SYSGEN := SSYSGEN 


Add commands in the following format to SYPAGSWPFILES.COM to install 
the secondary files each time the system boots. 


For page files, use the following format: 
SYSGEN INSTALL file-spec /PAGEFILE 
For swap files, use the following format: 


SYSGEN INSTALL file-spec /SWAPFILE 


The INSTALL command activates secondary page and swap files. Page and 
swap files not located in SYS$SYSTEM must be installed each time the 
system boots. 


Example 


The following commands in SYPAGSWPFILES.COM install secondary page and 
swap files on the device DUA10: with the logical name PAGE_SWAP: 
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MOUNT/SYSTEM/NOASSIST DUA10: SYS2 PAGE SWAP 

SYSGEN := SSYSGEN 

SYSGEN INSTALL PAGE SWAP: [SYSTEM] PAGEFILE1.SYS/PAGEFILE 

if $status then write sysSoutput "Installed page file PAGEFILE1.SYS" 
SYSGEN INSTALL PAGE SWAP: [SYSTEM]SWAPFILE1.SYS/SWAPFILE 

if $status then write sysSoutput "Installed swap file swapfilel.sys" 


5.2.4 Modifying SYCONFIG.COM to Configure Devices 


You can commands to SYCONFIG.COM to perform site-specific device 
configuration, including connecting nonstandard devices and suppressing 
autoconfiguration. 


i 12 TMT MN TM 


5.2.4.1 Connecting Nonstandard Devices 


Standard devices are automatically connected and configured by STARTUP.COM 
each time the system boots. Nonstandard devices (devices not supplied by 
Digital) are not automatically connected and configured; you must connect 

and configure these devices manually by entering certain commands. To 


execute these commands each time the system starts up, add the commands 
to SYCONFIG.COM. 


a> On VAX systems, add SYSGEN CONNECT commands. For more information 
on connecting devices, see Section 7.4. For more information on the SYSGEN 
CONNECT command, see the OpenVMS System Management Utilities Reference 
Manual (SYSGEN). ¢ 


On AXP systems, add SYSMAN IO CONNECT commands. For more information 
on connecting devices, see Section 7.4. For more information on the SYSMAN IO 
CONNECT command, see the OpenVMS System Management Utilities Reference 

Manual (SYSMAN). ¢ 


Example 
To connect a nonstandard device called the QQ device, add the following 
commands to SYCONFIG.COM: 


$ SYSGEN := SSYSGEN 
$ SYSGEN CONNECT QQA0 





5.2.4.2 Suppressing Autoconfiguration of Devices 
You might want to suppress autoconfiguration for various reasons, including the 
following: 
e To customize the order in which you configure devices 


¢ To troubleshoot booting problems 


¢ To allow Small Computer System Interface (SCSI) based workstations to use 
devices on another workstation’s SCSI bus without causing conflicts during 
boot time 


You can define a symbol in SYCONFIG.COM to suppress autoconfiguration. For 
more information, see Section 7.4.3. 


5.2.5 Modifying SYLOGICALS.COM to Define Systemwide Logical Names 


To define systemwide logical names, add commands to the command procedure 
SYS$MANAGER:SYLOGICALS.COM. 


A systemwide logical name is a logical name that applies to the entire system. It 
is defined in the system logical name table and can be used by any process in a 
system. 
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As supplied by Digital, SYLOGICALS.COM contains commands that assign 
systemwide logical names on a MicroVAX system that is not in a VMScluster 
environment. If your system is not a standalone MicroVAX system, you can 
ignore the procedure at the beginning of the template file and add systemwide 
logical name assignments to the end of the file. 


You can add commands to create your own site-specific systemwide logical names. 
In addition, if you want to change default definitions for the following system 
logical names, you can include the definitions in SYLOGICALS.COM. Table 5-2 
lists some commonly defined logical names. 


Table 5-2 Commonly Defined System Logical Names 


Logical Name For More Information 

LMF$LICENSE OpenVMS License Management Utility Manual 
NETNODE_REMOTE DECnet for OpenVMS Networking Manual 
NETPROXY Security Guide 

QMAN$MASTER Section 12.3 

RIGHTSLIST Security Guide 

SYS$ERRORLOG Section 17.2.2 

SYS$MONITOR Section 17.7.9 

SYSUAF Security Guide 


VMSMAIL_PROFILE OpenVMS User’s Manual 


Digital recommends that you define logical names for system components (for 
example, public disks and directories) in executive mode, using the /EXECUTIVE_ 
MODE qualifier with the ASSIGN or DEFINE command. This ensures that the 
logical name is available during system operations such as the activation of 
privileged mode images (LOGINOUT, MAIL, and so forth). 


For detailed information on logical name assignments and the privilege modes 
(executive, kernel, supervisor, and user), see the OpenVMS User’s Manual. 


How to Perform This Task 
1. Invoke any editor to edit the file SYS$S$MANAGER:SYLOGICALS.COM. 


2. Add logical name definitions in the following format to the end of the file, 
immediately preceding the EXIT command: 


DEFINE/SYSTEM/EXECUTIVE/NOLOG logical-name equivalence-name 
For example: 
DEF INE/SYSTEM/EXECUTIVE/NOLOG FINANCE DISK DRACSDRA2: 


For more information about the DEFINE command, see the OpenVMS DCL 
Dictionary. 


3. Exit the editor to create a new version of the file. The highest version will 
automatically be invoked by STARTUP.COM each time the system boots. 
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Example 


$ DEFINE/SYSTEM/EXECUTIVE/NOLOG FINANCE DISK DRACS$DRA2: 
$ DEFINE/SYSTEM/EXECUTIVE/NOLOG SYSDSK SYSS$SYSDEVICE: 


In this example, any user on the system (and any program running on the 
system) could use the name FINANCE_DISK (the logical name) in place of 
DRAC$DRA2: (the physical device name). Similarly, you can refer to the system 
disk (SYS$SYSDEVICE:) as SYSDSK. 


5.2.6 Modifying SYSECURITY.COM to Set Up Security Auditing 


SYSECURITY.COM runs prior to starting the security audit server process. You 

can add commands to this file to mount or define any disks that you want to hold 
security auditing log files or local security archive files. For more information on 
security auditing, see Section 17.6. 


Ordinarily, the system turns on auditing in VMS$LPBEGIN, just before 
SYSTARTUP_VMS.COM executes. However, you can change this behavior 
by redefining the logical name SYS$AUDIT_SERVER_INHIBIT. 


To inhibit the automatic startup of auditing, edit the 
SYS$STARTUP:SYLOGICALS.COM command procedure to add the following 
line: 


$ DEFINE/SYSTEM/EXECUTIVE SYS$AUDIT_SERVER_INHIBIT YES 


Then you can initiate auditing during another phase of system startup, perhaps 
at the end of SYSTARTUP_VMS.COM, by editing the command file to add the 
following line: 


$ SET AUDIT/SERVER=INITIATE 
For information on editing SYSTARTUP_VMS.COM, see Section 5.2.7. 


5.2.7 Modifying SYSTARTUP_VMS.COM to Perform General Operations 


To perform any site-specific command not performed by another startup command 
procedure, you can add or modify commands in the general-purpose, site-specific 
startup command procedure, SYSTARTUP_VMS.COM. 


Digital recommends that you edit this procedure to modify or add commands that 
perform tasks such as the following: 


Task For More Information 
Mounting public disks Section 5.2.7.1 
Setting the characteristics of terminals and printer devices Section 5.2.7.3 
Starting queues and enabling autostart for queues Section 5.2.7.4 
Installing known images Section 5.2.7.5 
~On AXP systems, installing resident images Section 5.2.7.6 
Setting up the OpenVMS InfoServer Client software Section 5.2.7.7 
Running the System Dump Analyzer Section 5.2.7.8 
Purging the operator’s log file Section 5.2.7.9 
Submitting batch jobs that are run at system startup time Section 5.2.7.10 
Creating systemwide announcements Section 5.2.7.11 
£AXP specific 
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Task For More information 
Starting up the LAT protocol software Section 5.2.7.12 
Starting the DECnet for OpenVMS network Section 5.2.7.13 
Starting up the DIBOL Message Manager Section 5.2.7.14 
Defining the number of interactive users Section 5.2.7.15 


How to Perform This Task 
To modify SYSTARTUP_VMS.COM, perform the following steps: 


1. Invoke any editor to edit the file. 


2. To prevent the command procedure from exiting if it invokes an error, include 
the DCL command SET NOON at the beginning of the file. This command 
disables error checking after the execution of each command in the procedure. 
For more information on error checking, see the OpenVMS User’s Manual. 


3. Add commands to perform site-specific operations. Sections 5.2.7.1 to 5.2.7.15 
describe operations that are typically performed by this command procedure. 


4. Exit the editor to create a new version of the file. The highest version will 
automatically be invoked by STARTUP.COM each time the system boots. 


5.2.7.1. Mounting Public Disks 
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A public volume is a disk that any process on the system can access. To make 
disks available for public use, you must do the following: 


¢ Physically load and spin up the disk. 
e If the disk is new, initialize it. 


¢ Mount the disk for systemwide access using the DCL command MOUNT. (You 
do not need to use the MOUNT command for the system disk, because the 
system disk is already mounted when the system starts up.) 


For more information on public volumes, see Section 8.1.3 and Section 8.5. For 
more information on the MOUNT command, see the OpenVMS DCL Dictionary. 
How to Perform This Task 

Add MOUNT commands in the following format to the command procedure: 


MOUNT/SYSTEM ddcu: volume_label logical_name 
where: 


e ddcu is the physical device name (including a colon immediately after the 
device name). For information on physical device names, see Section 7.1. 


¢ volume-label is an alphanumeric identification that you assign with the 
INITIALIZE command. 


e logical_name is the logical name that you want to assign to the device. 
Consider the advantages of using logical volume names to conceal the 
physical device names. If you and the users consistently use the logical 
volume name, it is not necessary to know on which physical drive the volume 
is mounted. Thus, you can avoid including physical device names in programs 
and command procedures. 


The /SYSTEM qualifier makes the disk available for systemwide access. 


Customizing the Operating System 
5.2 Modifying Site-Specific Startup Command Procedures 


When mounting disks in a startup command procedure, do not specify the 
/CLUSTER qualifier, even in a VAXcluster or VMScluster environment. Each 
node executes its own startup command procedure, so each node mounts disks for 
itself. 


Note 


Note that when SYSTARTUP_VMS.COM executes (and only then), the 
MOUNT command default includes the /NOASSIST qualifier. This 
qualifier means that operator-assisted mounts are disabled. To enable 
this feature during SYSTARTUP_VMS.COM, specify /ASSIST with each 
MOUNT command. Also, it is necessary to insert a WAIT statement 

in the command procedure prior to the firsts MOUNT statement for a 
DSA disk. The wait time is controller dependent. If you omit this wait, 
the MOUNT request might fail with a “no such device” status. See the 
OpenVMS I/O User’s Reference Manual for more information. 


For more information on public volumes, see Section 8.1.3 and Section 8.5. For 
more information on the MOUNT command, see the OpenVMS DCL Dictionary. 


5.2.7.2 Mounting Disks That Must Be Available Early in Startup 


If you have any disks that must be mounted early in startup, you can add 
MOUNT commands to SYCONFIG.COM. For example, your site might require 
that certain files be available before SYSTARTUP_VMS.COM executes. For more 
information about SYCONFIG.COM, see Section 5.2.4. 


5.2.7.3 Setting Terminal and Printer Characteristics 


To establish the device characteristics of the terminals and printers on the 
system, use a series of SET commands in your startup command procedure. For 
more information on the commands you use to set up devices, see Section 7.5.1 
and Section 7.6.1. 


If your configuration is simple, you can add the commands to SYSTARTUP_ 
VMS.COM. If your configuration requires a large number of commands, create a 
separate command procedure (for example, DEVICE_SETUP.COM) and execute 
it from SYSTARTUP_VMS.COM. When the device setup command procedure 
finishes executing, control returns to SYSTARTUP_VMS.COM. 


5.2.7.4 Starting Queues and Enabling Autostart for Queues 


You should add commands to SYSTARTUP_VMS.COM to perform the following 
tasks: 


e Enable autostart for queues 
¢ Start nonautostart execution queues 


If your configuration is simple, you can add these commands to to SYSTARTUP_ 
VMS.COM. On systems with a large number of queues, you might want to include 
the commands in a separate file named, for example, STARTQ.COM, and include 
a command in SYSTARTUP_VMS.COM to invoke the queue startup command 
procedure. The autostart feature simplifies queue startup, and allows you to start 
queues with fewer commands. Digital recommends you use autostart queues 
whenever possible to simplify queue startup. For more information on autostart 
queues, see Section 13.4. 


For more specific information on starting queues and enabling autostart for 
queues in system startup, see see Section 13.7.3. 
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5.2.7.5 Installing Known Images 


Section 16.9 explains how to install commonly used programs as known images 
to reduce the I/O overhead in activating those images and to assign attributes or 
privileges to the images. You use the Install utility (INSTALL) to install known 
images. You must reinstall these images each time the system boots. 


STARTUP.COM includes a series of INSTALL commands that install certain 
system programs as known images. You should include any site-specific INSTALL 
commands in SYSTARTUP_VMS.COM to install images each time the system 
boots. 


Before performing this task, you need to understand installed images. For 
information, see Section 16.9. 


Example 


The following example shows a command sequence you might include in 
SYSTARTUP_VMS.COM for installing additional known images: 


$ INSTALL 
ADD/OPEN/SHARED/HEADER_RESIDENT BASIC 
ADD/OPEN/SHARED/HEADER RESIDENT FORTRAN 
EXIT 


5.2.7.6 Installing Resident Images (AXP Only) 


AXP 


Section 16.9.6 explains how you can use the Install utility to install resident 
images on AXP systems. Images must be installed each time the system boots. 
You can add commands to SYSTARTUP_VMS.COM to automatically perform this 
task each time the system boots. ¢ 


5.2.7.7 Setting Up the OpenVMS InfoServer Client Software 


Chapter 21 explains the InfoServer system and its uses. On VAX systems, if 
you use the InfoServer system, you will probably perform some setup tasks in 
SYSTARTUP_VMS.COM. For example, you can add commands to SYSTARTUP_ 
VMS.COM to: 


e Start the InfoServer Client for OpenVMS software 


¢ Make remote compact discs available on your system each time the system 
boots ¢ 


5.2.7.8 Running the System Dump Analyzer 
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Section 15.9 explains how to run the System Dump Analyzer utility (SDA) each 
time the system boots to analyze the system crash dump in case the system 


failed the last time it was running. You can do this by adding command lines to 
SYSTARTUP_VMS.COM. 


For details, see Section 15.9 and the System Dump Analyzer Utility Manual. 


Caution 


If you use the page file for the crash dump file, you must enter the SDA 
command COPY when the system reboots, to copy the dump from the 
page file to another file suitable for analysis. For more information, see 
Section 15.10. 


If you fail to perform the copy operation, pages used to save the crash 
dump information are not released for paging, and your system might 
hang because it has insufficient paging space. For more information, see 
Section 15.10. 


Customizing the Operating System 
5.2 Modifying Site-Specific Startup Command Procedures 


Example : 

The following commands, executed in SYSTARTUP_VMS.COM, invoke SDA, save 
and analyze the crash dump, and print a listing file: 

$ ANALYZE/CRASH DUMP SYS$SYSTEM:SYSDUMP.DMP 


COPY SYS$SYSTEM: SAVEDUMP .DMP Save dump file 
SET OUTPUT DISK1:SYSDUMP.LIS Create listing file 


! 

! 
READ/EXECUTIVE { Read in symbols for kernel 
SHOW CRASH ! Display crash information 
SHOW STACK ! Show current stack 
SHOW SUMMARY ! List all active processes 
SHOW PROCESS/PCB/PHD/REGISTERS ! Display current process 
EXIT 


5.2.7.9 Purging the Operator Log File 


Section 17.5.1 explains the operator log file. Each time you reboot the system, 
you create a new version of OPERATOR.LOG. You should devise a plan for 
regular maintenance of the versions of this file. Add the following command to 
SYSTARTUP_VMS.COM to purge all but the last two versions of the operator log 
file: 


$ PURGE/KEEP=2 SYSSMANAGER: OPERATOR. LOG 


5.2.7.10 Submitting Batch Jobs to Run at Startup Time 


Your site might have batch jobs that you want to submit at system startup time. 
To submit such batch jobs, add SUBMIT commands in the following format to 
SYSTARTUP_VMS.COM: 


$ SUBMIT [/qualifier,...] SYS$MANAGER;file-spec 
For example: 
$ SUBMIT/PRIORITY=255 SYSSMANAGER:SYSDISK REBUILD 


This example submits a batch job to run a command procedure each time the 
system boots. The job is submitted at a high priority to make sure the job is 
scheduled before any batch jobs users might submit. If possible, submit startup 
batch jobs at high priority in this way before you start the batch queue. 


See Section 13.9.6.4 for information about scheduling of jobs. See the OpenVMS 
DCL Dictionary for information about the SUBMIT command. 


5.2.7.11 Creating Systemwide Announcements 


Usually, the last command in SYSTARTUP_VMS.COM announces to all terminals 
that the system is up and running: 


$ REPLY/ALL/BELL "OpenVMS Operating System at ANDROMEDA, INC. ready for use." 


Before the procedure exits, you can provide site-specific definitions for one or 
both of the logical names SYS$ANNOUNCE and SYS$WELCOME. Whenever 
a user logs in, the user’s terminal screen displays the messages associated with 
SYS$ANNOUNCE and SYS$WELCOME. 


Defining SYSSANNOUNCE 

You can define SYS$ANNOUNCE to print an announcement at the beginning of 
the login procedure for each user. The text prints immediately after a successful 
dial-in, Ctrl/Y, or carriage return is received. It also prints on LAT terminals 
when a user connects to a service using the CONNECT command. The text can 
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contain up to 63 characters. For longer messages, precede the name of a text- 
containing file with an at sign (@) so that the login command procedure prints the 
entire file as an announcement. 


For example, you could include the following command in SYSTARTUP_ 
VMS.COM: 


$ DEFINE/SYSTEM SYSSANNOUNCE "SIRIUS VMSCLUSTER AT ANDROMEDA, INC." 
Or you might prefer to print a file by including the following command: 
$ DEFINE/SYSTEM SYSSANNOUNCE "@SYSS$MANAGER: ANNOUNCE. TXT" 


If you do not define SYS$ANNOUNCE, the system does not display an 
announcement. 


Caution 


Sites requiring moderate or high security should restrict the amount of 
information displayed in system announcements. 


Defining SYSSWELCOME 


You can define SYS$WELCOME to display a welcome message whenever a user 
logs in. The text prints immediately after the user enters the correct password. 
The text can contain up to 63 characters. For longer messages, precede the name 
of a text-containing file with an at sign (@) so that the login command procedure 
displays the entire file as a welcoming announcement. 


For example, you could include a command such as the following in SYSTARTUP_ 
VMS.COM: 


$ DEFINE/SYSTEM SYSS$WELCOME "Welcome to Node RANDOM" 


If you prefer to display the contents of a file containing a message, you could use 
the following line in the procedure: 


$ DEFINE/SYSTEM SYSSWELCOME "@SYSSMANAGER: WELCOME. TXT" 


If you do not explicitly define SYS$WELCOME, the terminal displays a standard 
welcome message similar to the following: 


Welcome to OpenVMS Version n.n 


You can add the DECnet for OpenVMS node name to this message by including a 
translation of the logical name SYS$NODE. When DECnet for OpenVMS starts, 
it creates the logical name assignment for SYS$NODE. 


SYSTARTUP_VMS.COM, supplied as a template with your distribution 
kit, includes additional command examples for SYS$ANNOUNCE and 
SYS$WELCOME. 


§.2.7.12 Starting Up and Customizing the LAT Protocol Software 
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Section 22.1 explains the LAT protocol and its uses. To set up your node as a LAT 
service node and start the LAT protocol software on your system each time the 
system boots, add the following line to SYSTARTUP_VMS.COM: 


$ @SYSSSTARTUP: LATSSTARTUP.COM 


When the procedure executes this command, it invokes LAT$STARTUP.COM, 
which in turn invokes the LAT$CONFIG and LAT$SYSTARTUP command 
procedures. For more information, see Section 22.4. 
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5.2.7.13 Starting the DECnet for OpenVMS Network 


If your system participates in a DECnet for OpenVMS network, you must 
start the DECnet for OpenVMS software each time your system boots. Edit 
SYSTARTUP_VMS.COM to delete the exclamation point (!) at the beginning of 
the following command line: 


$ @SYSSMANAGER: STARTNET.COM 


Before starting the network the first time, you must register your DECnet for 
OpenVMS license and configure your network. See Section 20.2 for information 
on setting up the DECnet for OpenVMS network. 


5.2.7.14 Starting the DIBOL Message Manager 


Each node that will execute DIBOL programs must contain a line in 
SYS$STARTUP:SYSTARTUP_VMS.COM that executes the command procedure 
SYS$STARTUP:DBLSTRTUP.COM. This command procedure starts the DIBOL 
Message Manager, used by DIBOL programs as an intermediary in passing 
messages. 


Example 
SYSTARTUP_VMS.COM should contain a line as follows: 


$ @SYSSSTARTUP: DBLSTRTUP.COM 


5.2.7.15 Defining the Number of Interactive Users 


_ By default, when the system starts up, it limits to 64 the number of interactive 
users allowed to log in. 


To change the default value for the number of interactive users that you permit to 
log in to your system at one time, define the symbol STARTUP$INTERACTIVE_ 
LOGINS to be the maximum number of users in SYSTARTUP_VMS.COM as 


follows: 
STARTUPS$SINTERACTIVE_LOGINS ==n 


For n, specify the maximum number of interactive users that can log in at one 
time. 


Note 


You cannot set the number of interactive users to a value higher than the 
value authorized by your VAX or AXP computer license. 


The maximum number of interactive users influences the service rating that the 
LAT software assigns to a service node. The LAT software uses a ratio of current 
users to maximum users in calculating a rating. An artificially high user limit 

results in a high service rating, indicating—erroneously—that the service node is 
more able to provide services. For information on LAT software, see Section 22.1. 


Example 
$ STARTUPSINTERACTIVE LOGINS == 200 
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5.3 Modifying Login Command Procedures to Customize User 
Environments 


In addition to modifying site-specific startup command procedures, you can add 
commands to login command procedures to perform operations each time a 
user logs in. 


Command Procedure Description 


SYS$MANAGER:SYLOGIN.COM A file to which you can add common 
commands to execute whenever any user logs 
in. If SYS$MANAGER:SYLOGIN.COM exists 
and the logical name SYS$SYLOGIN points 
to this file. SYLOGIN.COM automatically 
executes when any user logs in. 


SYS$LOGIN:LOGIN.COM A file to which you or users can add commands 
that are to be executed only when individual 
users log in to their accounts. If a file named 
LOGIN.COM exists in a user’s SYS$LOGIN 
directory, it automatically executes when the 
user logs in. 


Caution 


If you introduce an error in login procedures, it is possible to accidentally 
lock yourself out of the system. Section 4.3.2 describes a boot procedure 
to be used in such an emergency. 


The SYLOGIN.COM Procedure 


As system manager, you create and maintain SYLOGIN.COM. This file is 
supplied on your distribution kit as a template, and contains commands that 
you can modify and add to as the needs of your site dictate. 


The template for SYSTARTUP_VMS.COM includes the following command line 
that assigns the logical name SYS$SYLOGIN to SYLOGIN.COM: 


$ DEFINE/SYSTEM/EXEC/NOLOG SYS$SYLOGIN SYSSMANAGER:SYLOGIN.COM 


LOGIN.COM Procedures 


Each user creates and maintains a personal copy of the login command procedure 
LOGIN.COM. This file should be located in the top-level directory for the user’s 
account. As a system manager, you might need to help users set up a personal 
copy of LOGIN.COM. 


Example 


See Example 6-1 for a sample SYLOGIN command file. See Example 6—2 and 
the OpenVMS User’s Manual for sample LOGIN.COM procedures. 


5.4 Customizing Startup Databases with the System Management 
Utility (SYSMAN) 


Startup databases contain information used to start up system software. 
For example, STARTUP.COM uses information in a startup database named 
STARTUP$STARTUP_VMS to start the OpenVMS operating system. It uses 
information in a startup database named STARTUP$STARTUP_LAYERED 
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to start layered products. For more information about startup databases, see 
Section 5.4.1. 


You can use the STARTUP command of the System Management utility 
(SYSMAN) to customize startup databases as follows: 


e Display information in any startup database. 
¢ Create a site-specific startup database. 


e Add, modify, or remove elements in the layered product database or site- 
specific database. (Digital recommends that you not modify the OpenVMS 
startup database.) 


The following sections describe these tasks. 


Before performing these tasks, you need to understand SYSMAN. For more 
information, see Section 2.3.1. You should also understand startup databases, 
in particular, the layered product startup database. For information, see 
Section 5.4.1 and Section 5.4.2. 


5.4.1 Understanding Startup Databases 


Three startup database files are provided with the operating system, in the 
location defined by the logical name SYS$STARTUP: 


File Description 


VMS$PHASES.DAT Determines the order of the phases of startup in a sequential 
list. This file includes a series of four basic phases (INITIAL, 
CONFIGURE, DEVICE, and BASEENVIRON) needed 
to bring the operating system up to a basic working 
environment, followed by a series of phases for layered 
products. STARTUP.COM uses this list of phases for startup. 
Do not modify this file. 


VMS$VMS.DAT Equivalent to the logical name STARTUP$STARTUP_VMS. 
This file contains information about the files used to start the 
base operating system environment during system startup. Do - 
not modify this file. 


STARTUP$STARTUP_VMS is provided for your information 


only. Use SYSMAN to display information in this file. For 
more information, see Section 5.4.5. 


VMS$LAYERED.DAT Equivalent to the logical name STARTUP$STARTUP_ 
LAYERED. This file contains information about files that start 
site-specific products and layered products. The system uses 
the information in this file to start layered products during 
system startup. Section 5.4.2 provides more information about 
this file. 


Use SYSMAN to modify this file so that it contains information 
about all the layered product startup files you want to execute 
on your system. 


If you have site-specific software that you want to manage separately from your 
layered products, you can use SYSMAN to create an additional startup database. 
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5.4.2 Understanding the Layered Product Startup Database 
The layered product startup database file (referred to by the logical name 
STARTUP$STARTUP_LAYERED) lists the files and command procedures that 


start site-specific products and layered products. It contains the following 
characteristics of each startup file: 
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Name of the component file to be run. The file type must be either .EXE or 
.COM. 


Phase in which the component file is to run. Each phase describes a minimum 
environment that exists at that point in the startup process, as follows: 


1. BASEENVIRON—Startup tasks execute here. These must be performed 
before the site-specific startup command procedure, SYSTARTUP_ 
VMS.COM, executes. 


2. LPBEGIN—SYSTARTUP_VMS.COM, the site-specific startup command 
procedure, executes here, as do any other files that prepare an 
environment necessary for layered products. 


3. LPMAIN—The majority of layered products execute here. This phase is 
the default. 


4, LPBETA—Layered products that have a dependency on previously 
installed products execute here. 


5. END—Products that are dependent on layered products execute here. 


Each phase must meet the prerequisites of the following phase; therefore, 
the order of the phases is extremely important. Components that occur in a 
phase cannot have dependencies on components that are in the same phase or 
in subsequent phases. When installing layered products using SYSMAN, be 
sure that all requisite components occur in a previous phase. 


Mode (or method) by which the component file is to run. Choose one of the 
following modes: 


— DIRECT (the default, where the command procedure or image is executed 
immediately) 


— BATCH (valid only for command procedures) 
—- SPAWN 


Node restrictions for the component. This is either the node or nodes on 
which the component file should be run, or the node or nodes on which the 
component file should not be run. 


Parameters passed to the component file for execution. You can pass up to 
eight parameters, using the following format: 


(Pl:args,P2:args,...) 


You can omit the parentheses if you pass only a single parameter. 
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5.4.3 Specifying the Current Startup Database 


With SYSMAN, the current database is the one that will be the target for the 
SYSMAN commands. 


You can display or modify STARTUP$STARTUP_LAYERED or database files 
that you create. You can display STARTUP$STARTUP_VMS, but you should not 
modify it. 


By default, the layered product database is the current database. To perform 
commands on another database, specify it as the current database by entering 
the SET DATABASE command in the following format: 


STARTUP SET DATABASE database 
For database, specify the name of the database. 


Example 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> STARTUP SET DATABASE STARTUPSSTARTUP_LOCAL 
tSYSMAN-I-NEWCOMPFIL, current component file is now STARTUP$STARTUP_LOCAL 


5.4.4 Showing the Name of the Target Startup Database 


To display which database is the target database, enter the STARTUP SHOW 
DATABASE command as follows: 


SYSMAN> STARTUP SHOW DATABASE 


Example 


$ RUN SYSSSYSTEM:SYSMAN 
SYSMAN> STARTUP SHOW DATABASE 


5.4.5 Showing the Contents of a Startup Database 


To display the contents of the current database, enter the STARTUP SHOW FILE 
command. For example: 


SYSMAN> STARTUP SHOW FILE/FULL 


You can specify various qualifiers for this command to control the amount 
of information displayed. For more information, see the OpenVMS System 
Management Utilities Reference Manual. 


Example 


$ RUN SYSSSYSTEM:SYSMAN 
SYSMAN> STARTUP SHOW FILE/FULL 


5.4.6 Adding Startup Files to a Startup Database 


To add a file to the layered product startup database, use the STARTUP ADD 
command. The /MODE qualifier specifies the mode of execution for the file. 
The /PHASE qualifier specifies the phase within system startup when the file 
is to be executed. For information on the layered product startup phases, see 
Section 5.4.2. 


Do not use this command to modify STARTUP$STARTUP_VMS; this command 
procedure starts the operating system. The STARTUP MODIFY command 
requires read and write access to the startup database. 


When adding layered product startup files using SYSMAN, be sure that all 
requisite components occur in a previous phase. 
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Enter the STARTUP ADD command with appropriate qualifiers. For example: 
SYSMAN> STARTUP ADD/MODE=DIRECT/PHASE=LPMAIN FORSLPMAIN 043 _STARTUP.COM 


For information on the valid qualifiers, see the SYSMAN section of the System 
Management Utilities Reference Manual. 


Example 

$ RUN SYSS$SYSTEM:SYSMAN 

SYSMAN> STARTUP SHOW DATABASE 

$SYSMAN-I-DATANAME, STARTUP database is STARTUPSSTARTUP_ LAYERED 

SYSMAN> STARTUP ADD/MODE=DIRECT/PHASE=LPMAIN FORSLPMAIN 043 STARTUP.COM 


5.4.7 Changing Information Associated with a Startup File 


Once a file is included in the layered product startup database, you can 

modify the information associated with the file by entering the STARTUP 
MODIFY command. You can specify any of the following qualifiers to specify the 
information that is to be changed: 


« /MODE 

e /NAME=filespec 

e /PARAMETER=(P1:arg1, P2:arg2,...) 
e /PHASE 


Do not use this command to modify STARTUP$STARTUP_VMS. This command 
requires read and write access to the startup database. 


How to Perform This Task 
Enter the STARTUP MODIFY command. For example: 


SYSMAN> STARTUP MODIFY FILE FORSLPMAIN_043 STARTUP.COM/NODE=ZNODE 


For information on the qualifiers for this command, see the OpenVMS System 
Management Utilities Reference Manual. 


Example 

$ RUN SYSSSYSTEM:SYSMAN 

SYSMAN> STARTUP ADD/MODE=DIRECT/PHASE=LPMAIN FORSLPMAIN 043 STARTUP.COM 
SYSMAN> STARTUP SHOW FILE/NODE 

SYSMAN> STARTUP MODIFY FILE FORSLPMAIN 043 STARTUP.COM/NODE=ZNODE 


5.4.8 Deleting a Record from a Startup Database 
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Deleting a record from a startup database prevents a product from starting up. 
To delete a record, use the STARTUP REMOVE FILE command. This command 
leaves the startup file intact, but the file is not used in system startup. This 
command requires read and write access to the startup database. Do not use this 
command to modify STARTUP$STARTUP_VMS. 


To delete a record from a startup database, enter a STARTUP REMOVE FILE 
command in the following format: 


STARTUP REMOVE FILE filename 


For filename, specify the name of the startup file to be removed. 
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Example 

$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> STARTUP SHOW FILE/FULL 

SYSMAN> STARTUP REMOVE FILE FORS$LPMAIN 043 STARTUP.COM 
SYSMAN> STARTUP SHOW FILE/FULL 

SYSMAN> EXIT 


5.4.9 Preventing a Startup File from Executing 


To temporarily prevent a startup file from executing, enter the STARTUP 
DISABLE command. You can specify the /NODE qualifier to disable the startup 
file on certain nodes. 


This command requires read and write access to the startup database. Do not 
use this command to modify STARTUP$STARTUP_VMS. 


To delete a record from a startup database, enter the STARTUP DISABLE 
command as follows: 


STARTUP DISABLE FILE filename 
For filename, specify the name of the startup file to be disabled. 


Example 

$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> STARTUP SHOW FILE 

SYSMAN> STARTUP DISABLE FILE FORS$LPMAIN 043 STARTUP.COM/NODE=ZURICH 


5.4.10 Allowing a Previously Disabled Startup File to Execute 


If you have disabled a startup file from executing, you can enable it again by 
using the STARTUP ENABLE command. You can specify the /NODE qualifier to 
enable the startup file on certain nodes. 


This command requires read and write access to the startup database. Do not 
use this command to modify STARTUP$STARTUP_VMS. 


To enable a previously disabled file, enter the STARTUP ENABLE FILE 
command in the following format: 


STARTUP ENABLE FILE filename 
For filename, specify the name of the file to be enabled. 


Example 


$ RUN SYSSSYSTEM:SYSMAN 
SYSMAN> STARTUP ENABLE FILE FORSLPMAIN 043 STARTUP.COM/NODE=ZURICH 


5.5 Registering Images That Have System Version Dependencies 
(VAX Only) 


<i> 


On VAX systems, registering images with the Image Registry facility allows you 
to continue to use application images (including main images, shared libraries, 
and device drivers) that are dependent on a previous version of the operating 
system. 
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5.5.1 Understanding System Version Dependency and the Image Registry 
(VAX Only) 


Applications that run on the OpenVMS operating system depend on various 
operating system components, including internal interfaces. For example, an 
application might call system routines or reference system data cells or system 
data structures. New versions of the operating system sometimes include changes 
to those interfaces that can break applications depending on them. 


Applications that depend on operating system interfaces are usually bound to a 
particular version of the operating system when the application image is linked by 
resolving symbols against the system symbol table, SYS.STB. Version-dependent 
images reference both of the following: 


¢ The major version number of the operating system. 


e A set of component version numbers (version numbers of loadable executive 
images). 


Images linked against SYS.STB with the Link utility qualifier /SELECTIVE_ 
SEARCH only include component version numbers for those symbols that 
were referenced at link time. Images linked against SYS.STB without the 
/SELECTIVE_SEARCH qualifier include references to all component versions. 


When you attempt to run an image, the system checks to determine if the image 
requires a certain version of the operating system, or of system components. If 
the version of the running system does not match the version requirements of the 
image, the image fails. 


Note 


You cannot run AXP images on a VAX system, and vice versa. 


The system also checks version numbers when you attempt to install an image 
using the Install utility (INSTALL) or connect a device driver using the System 
Generation utility (SYSGEN). 


When you upgrade your system to a new operating system version, an image 
might fail because the new operating system version no longer matches 

the image’s version requirements. However, an image might continue to be 
compatible with the new operating system version, even if it fails the version 
check. 


Note 


In OpenVMS Version 6.0, the major version number was not changed; 
only the component version numbers for FILES_VOLUMES, MEMORY_ 
MANAGEMENT, and SECURITY were incremented to reflect interface 
changes in these areas. As a result, many version-dependent images built 
in VMS VAX Version 5.x systems (that is, images that do not reference 
FILES_VOLUMES, MEMORY_MANAGEMENT, or SECURITY) will run 
on OpenVMS Version 6.0 without any action. However, version-dependent 
images that do reference these components need to be registered with the 
image registry, as explained in this section. 
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To continue running a compatible image, you can register the image using the 
Image Registry facility. Registering an image records information about the 
image in a file called the image registry and exempts the images recorded from 
version checks performed by the image activator (which runs images), INSTALL, 
and SYSGEN. 


Caution 


To avoid system crashes and data corruption, inspect and test an image 
carefully before you register it. Registering an image does not necessarily 
make it work; registering simply bypasses the version checks. 


You do not need to register images that are linked as part of installation because 
they match the current operating system version. However, linking an image 
during installation does not assure that system version dependencies do not exist. 
For information about changes in the current operating system version that may 
require you to recompile an image or change source code, see the Release Notes. 


The Image Registry facility allows you to independently register different versions 
of an image. It also allows you to deregister, analyze, and show images in the 
image registry. 


5.5.2 Using the Image Registry Facility (VAX Only) 


To register an image in the Image Registry, run the command procedure 
SYS$UPDATE:REGISTER_PRIVILEGED_IMAGE.COM. Enter a command 
in the following format: 


$ @SYSSUPDATE:REGISTER PRIVILEGED IMAGE keyword filename 


where: 

keyword Specifies one or more of the keywords described in Table 5-3, separated 
by commas. 

filename Specifies the name and location of the image you want to register. The 


filename parameter accepts wildcard characters. 


Table 5-3 REGISTER_PRIVILEGED_IMAGE.COM Keywords 


Keyword Action 

ANALYZE Displays version-dependent image names and their subsystem 
dependencies. 

REGISTER Registers images on the local system. 

DEREGISTER Deletes images from the registry on the local system. 

SHOW Lists the registry content. To display the complete registry 
content, specify a wildcard (*) for the file name. 

CONFIRM Confirms that each specified image be added to or deleted from 
the registry (used only with REGISTER and DEREGISTER) 

TRACE Lists each image file for verification purposes (used only with 
REGISTER and DEREGISTER) 

HELP Describes the supported keywords and provides examples. 


If the image does not have a version dependency, the following message is 
displayed: 
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REGISTER-I-SUMMARY n images examined, n have dependencies 


In this message, n is the number of images examined and the number of images 
that have dependencies. 


Example 
The following example adds Rdb/VMS images to the registry: 
$ @SYSSUPDATE: REGISTER PRIVILEGED IMAGE REGISTER SYSSLIBRARY : RDM* 


SREGISTER-I-ADDED added RDMPRV to registry 
$REGISTER-I-ADDED added RDMSHRP to registry ¢# 


5.6 Customizing the Help Message Database 


The Help Message utility (MSGHLP) allows users to quickly access online 
descriptions of system messages from the DCL prompt. Users with write access 
to Digital-supplied .MSGHLP$DATA files can customize the Help Message 
database in more radical ways than general users can. The following sections 
describe how to perform the following customization tasks: 


Task For More Information 
Creating system-level Help Message database search paths Section 5.6.1 
Deleting Digital-supplied messages Section 5.6.2 
Adding comments to Digital-supplied messages Section 5.6.3 
Changing text in Digital-supplied messages Section 5.6.4 
Adding messages to Digital-supplied database files Section 5.6.5 


Before performing these tasks, you should be familiar with the Help Message 
utility. For a complete description of Help Message features, basic tasks, and the 
HELP/MESSAGE command and qualifiers, see the OpenVMS System Messages: 
Companion Guide for Help Message Users. Also see that manual for a description 
of the files that you must manipulate in order to customize the Help Message 
database. 


Note 


Currently, user-supplied comments or additions to Digital-supplied 
-.MSGHLP$DATA files are not preserved through the next upgrade. 
However, your own .MSGHLP$DATA files are not affected by future 
releases. 


Note that you can reuse .MSGHLP files to insert your own messages into 
future Digital-supplied database files. Depending on the data format in 
future databases, you might also be able to reuse some .MSGHLP files to 
insert comments. 


5.6.1 Creating System-Level Database Search Paths 


Help Message database files need not reside on the system disk. You can create 
system logical names to define one or more Help Message search paths to access 
multiple .MSGHLP$DATA files in different locations. 
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When Help Message is installed, the OpenVMS messages database file is installed 
by default at SYS$COMMON:[SYSHLPIMSGHLP$LIBRARY.MSGHLP$DATA. 
However, this file can optionally be installed on or moved to another disk. The 
alternate location must be pointed to by logical name MSGHLP$LIBRARY. Use 
this command to define the logical name: 


DEFINE/SYSTEM MSGHLP$LIBRARY disk:[directory]MSGHLPS$LIBRARY.MSGHLP$DATA 


By default, Help Message attempts to look up messages in the default location 
unless the logical nnme MSGHLP$LIBRARY is defined. If you do not use 

the default database location, include the logical name definition command in 
SYS$MANAGER:SYLOGICALS.COM so that the database is defined each time 
the system is booted. 


Note 


If you move MSGHLP$LIBRARY.MSGHLP$DATA to a new location after 
installation, be sure to set the proper protections on the file and directory 
so that the database cannot be accidentally deleted or modified. The 
protections at installation are (RWE, RWE, RE, RE) for the directory and 
(RWE, RWE, RWE, RE) for the file. 


You and other system users can create additional MSGHLP$DATA files, as 
described in the OpenVMS System Messages: Companion Guide for Help Message 
Users. None of the .MSGHLP$DATA files need reside on the system disk. 

You can add new files to a systemwide default database search path defined 

by MSGHLP$LIBRARY, or you can create specialized search paths to include 
different configurations of .MSGHLP$DATA files. 


To use system resources more efficiently, you can create different search paths 
for different user groups, depending on which .MSGHLP$DATA files they need 
to access. For example, you could define three different search paths tailored to 
different user groups: 


DEFINE/SYSTEM logical-name-1 file-a,file-b, file-c 
DEFINE/SYSTEM logical-name-2 file-a,file-d 
DEFINE/SYSTEM logical-name-3 file-x, file-a, file-y, file-z 


Note 


The first file you list in a search path is the default database for /INSERT 
and /DELETE operations that operate on that search path. By default, all 
other operations access all the files in a search path. 


Users can select ar: alternate to the system default database by specifying the 
/LIBRARY qualifier in the HELP/MESSAGE command. Individual users can also 
create their own logical name search paths at the process level. 
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Example 

The following example defines a Help Message search path that accesses 
-MSGHLP$DATA database files in three locations: the Digital-supplied OpenVMS 
messages are at USERS:[TOOLS], and other files are at USERS:[NEW_PROJ] 
and TEST:[TRY_ME]. 


$ DEFINE/SYSTEM MSGHLPSLIBRARY USERS: [ TOOLS ]MSGHLPSLIBRARY .MSGHLPSDATA, - 
_$ USERS: [NEW _PROJ]OUR_MESSAGES .MSGHLP$DATA, TEST: [TRY_ME]NEW.MSGHLP$DATA 


5.6.2 Deleting Digital-Supplied Messages from the Database 
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You can delete Digital-supplied messages from the database to conserve system 
resources or improve response time. 


How to Perform This Task 


1. Use the /EXTRACT qualifier to create a .MSGHLP file containing the 
messages you want to delete from the database. (See the OpenVMS System 
Messages: Companion Guide for Help Message Users for a full description of 
how to select the contents of the .MSGHLP file.) Some examples follow. 


Use the following syntax to extract all the messages for a specified facility: 
HELP/MESSAGE/FACILITY=facility-name/EXTRACT=filename. MSGHLP 


Use this syntax to extract one or more messages specified by the search 
string: 


HELP/MESSAGE/EXTRACT=filename.MSGHLP search-string 


2. Check the contents of the resulting .MSGHLP file to be sure that it contains 
only the data that you want to delete from the database. Edit out any 
messages that you do not want to delete from the database. 


3. Use /DELETE to delete the contents of the .MSGHLP file from the database. 
Include /LIBRARY if the MSGHLP$LIBRARY.MSGHLP$DATA file is not 
the default database or if it is not the first file in the search path defined by 
logical name MSGHLP$LIBRARY. 


HELP/MESSAGE/DELETE=filename.MSGHLP 
HELP/MESSAGE/DELETE=filename. MSGHLP/LIBRARY=disk:[directory]filename. MSGHLP$DATA 


Notes 


e Save the .MSGHLP file if you might ever want to add the deleted 
messages back into the database prior to the next upgrade. You 
can store the file on tape to conserve disk space. 


e Ifyou delete and then reinsert messages, these messages are 
treated like user-supplied messages and are displayed with change 
bars. 


e Any Digital-supplied messages that you delete are currently 
reinserted into the database at the next upgrade. You can delete 
the messages again using a saved .MSGHLP file or you can create 
a new .MSGHLP file. Tip: If you keep a .MSGHLFP file for future 
deletion purposes only, you need save only the lines prefixed by 
1 and 2. 
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4. To save disk space, you can compress the .MSGHLP$DATA file to close up 
any free space created by the deletions. Use the following command sequence 
to compress the file: 


CONVERT disk:[directory]filename. MSGHLP$DATA disk:[directory|filename. MSGHLP$DATA 
PURGE disk:[directory]filename.MSGHLP$DATA 


Example 


The following example extracts and then deletes all messages for the DDTM 
(DECdtm services) facility from the default database. The last two commands 
compress the Digital-supplied database file to conserve disk space after the 
deletions. 


$ HELP/MESSAGE/FACILITY=DDTM/EXTRACT=DDTM.MSGHLP 

$ HELP/MESSAGE/DELETE=DDTM.MSGHLP 

$ CONVERT SYSSCOMMON: [SYSHLP ]MSGHLPSLIBRARY .MSGHLP$DATA- 
_§$ SYSS$COMMON: [ SYSHLP ]MSGHLPS$LIBRARY .MSGHLP$DATA 

$ PURGE SYSS$COMMON: [SYSHLP ]MSGHLPS$LIBRARY .MSGHLP$DATA 


5.6.3 Adding Comments to Digital-Supplied Messages 


You can add comments to Digital-supplied messages documentation. Comments 
display with change bars immediately following the Digital-supplied description. 
This feature is a handy way to publicize a site-specific solution for a common 
problem. 


Note 


Currently, user-supplied comments to Digital-supplied .MSGHLP$DATA 
files are not preserved through the next upgrade. 


How to Perform This Task 


1. Extract the message to which you want to add a comment. The following 
example extracts hypothetical message NOSNO: 


$ HELP/MESSAGE/EXTRACT=NOSNO.MSGHLP NOSNO 


2. Edit the .MSGHLP file to add your comment. The .MSGHLP file format uses 
a unique numerical prefix to designate the message, facility, explanation, and 
user action sections of the message description. Add your comments at the 
end using a “5” prefix. 


1NOSNO, can’t ski; no snow 

2XCSKI, XCSKI Program 

3Your attempt to ski failed because there is no snow. 

4Wait until there is snow and attempt the operation again. 
5If you don’t want to wait, go to a location where there is 
5snow and ski there. 

5 

50r, try ice skating instead! 


Tips for modifying files: 


e Limit your comments to 60 characters per line so that they do not exceed 
the terminal display area. 


e Use a “5” prefix on blank lines too. 
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¢ Do not edit Digital-supplied data. Any such edits are ignored when the 
comment is added to the database. Section 5.6.4 describes how you can 
alter Digital-supplied data. 


3. Update the database by inserting the updated message: 
$ HELP/MESSAGE/INSERT=NOSNO.MSGHLP 
The comment now displays following the Digital-supplied message description. 


Example 
$ HELP/MESSAGE/EXTRACT=ACCVIO.MSGHLP ACCVIO 


[Edit ACCVIO.MSGHLP to add your comment.] 
$ HELP/MESSAGE/INSERT=ACCVIO.MSGHLP 


5.6.4 Changing Digital-Supplied Data 
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You cannot use the procedure described in Section 5.6.3 to alter Digital-supplied 
information. The recommended way to permanently change Digital-supplied 
information is to file a Software Performance Report (SPR) or mail a Reader’s 
Comment with your comments or corrections for a future release. 


The sequence described in this section allows you to modify Digital-supplied data, 
with the following results: 


e The Digital-supplied message is deleted from the database and your version 
of the message is inserted. 


e The message you modify subsequently displays with change bars to designate 
it as unsupported, user-supplied data. 
Note 


Currently, the Digital-supplied message is reinserted into the database at 
the next upgrade and the user-supplied text is overwritten. 


How to Perform This Task 
1. Extract the message having the text or description you want to change: 
HELP/MESSAGE/EXTRACT=filename.MSGHLP search-string 


2. Check the .MSGHLP file to ensure that your search did not pick up any 
messages that you do not want to change. Delete any such messages that you 
want to preserve out of the .MSGHLFP file. 


3. Delete the Digital-supplied version of the message from the Help Message 
database by specifying the .MSGHLP file as input. The following command 
deletes all messages in the .MSGHLP file from the default MSGHLP$DATA 
file: 


HELP/MESSAGE/DELETE=filename.MSGHLP 

4. Edit the .MSGHLP file to make your changes. 
Insert the revised message description into the Help Message database: 
HELP/MESSAGE/INSERT=filename. MSGHLP 


Your version of the message now appears in the database with change bars to 
indicate that it is not a Digital-supplied message. 
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Example 


$ HELP/MESSAGE/EXTRACT=NOFILES.MSGHLP NOFILES 
$ HELP/MESSAGE/DELETE=NOFILES .MSGHLP 


[Edit NOFILES.MSGHLP to change the text.] 
$ HELP/MESSAGE/INSERT=NOFILES .MSGHLP 


5.6.5 Adding Messages to Digital-Supplied Database Files 


The OpenVMS System Messages: Companion Guide for Help Message Users 
describes how to create your own .MSGHLP$DATA files to add new messages 

to the Help Message database. Keeping your messages in a separate file can 
simplify your messages bookkeeping and ensure that your messages are preserved 
through future upgrades. 


With write access to Digital-supplied .MSGHLP$DATA files, you 

can alternatively insert your own messages into the Digital-supplied 
MSGHLP$LIBRARY.MSGHLP$DATA file. However, messages inserted using 
this technique will currently be overwritten at the next upgrade. You can, 
however, save your input .MSGHLP files and repeat the insertion process at the 
next upgrade. 


How to Perform This Task 


1. Create a .MSGHLP file with your message descriptions in it. (Section 5.6.3 
includes an example of the .MSGHLP file format.) 


2. Specify your .MSGHLP file as input to update the Digital-supplied 
-MSGHLP$DATA file. Assuming that MSGHLP$LIBRARY.MSGHLP$DATA 
is the default, all you must enter is: 


HELP/MESSAGE/INSERT=filename. MSGHLP 


Example 
$ HELP /MESSAGE/INSERT=MYMESSAGES .MSGHLP 


5.7 Setting Up Your System to Compensate for Different Time 
Zones (VAX Only) 


<> 


On VAX systems, if your system communicates with systems in other time zones, 
you can use the time conversion service and the Coordinated Universal Time 
(UTC) system services to compensate for differences in time stamps because 

of differing time zones. For information on the UTC system services, see the 
OpenVMS System Services Reference Manual. 


To take advantage of the time conversion service, you must set your system’s time 
differential factor (TDF). Before performing this task, you need to understand the 
time differential factor. 


5.7.1 Understanding the Time Differential Factor (TDF) (VAX Only) 


Your system’s time differential factor is the difference between your system time 
and Coordinated Universal Time (UTC). The value is expressed in hh:mm format. 
The Americas have a negative difference from UTC, while Europe, Africa, Asia, 
and Australia have positive differences from UTC. Figure 5-1 illustrates the TDF 
for different time zones. 
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To set or show your system’s TDF, run the command procedure 
SYS$MANAGER:UTC$CONFIGURE_TDF.COM. Once you set your TDF, 
it remains in the system until you change it. The system logical name 
SYS$TIMEZONE_DIFFERENTIAL is equivalent to the system’s TDF (in 
seconds). You do not need to set the TDF each time your system boots. 


In a VAXcluster environment, a satellite node automatically uses the TDF of its 
boot node, which it reads once when it joins the VAXcluster or VMScluster. 


At daylight savings time, you need to set your local time forward by 1 hour. 

To do so, run UTC$CONFIGURE_TDF.COM. Alternatively, you can submit the 
command procedure SYS$EXAMPLES:DAYLIGHT_SAVINGS.COM as a batch job 
to automatically change the local time. You can also use either of these methods 
to set the local time back to standard time. 


Use Figure 5-1 to determine the time differential factor (TDF) for your time zone. 


Figure 5-1 Time Differential Factor (TDF) Map 
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5.7.2 Showing and Setting Your System’s Time Differential Factor (TDF) (VAX 


Only) 


To take advantage of the time conversion service, you must set your system’s 
time differential factor (TDF). To do this, run the command procedure 
SYS$MANAGER:UTC$CONFIGURE_TDF.COM, as follows: 


1. 


Log in to the SYSTEM account, or enter the following command to enable 
LOG_IO and OPER privileges: 


$ SET PROCESS/PRIVILEGE=(LOG_1I0,OPER) 


Enter the following command to invoke the UTC$CONFIGURE_TDF 
procedure: 


$ @SYSSMANAGER:UTCSCONFIGURE_TDF.COM 


The command procedure displays a menu of options and prompts you to 
choose an option: 


Configuring the Time Differential Factor 


Enter ? anytime for help 


[0] Exit 
[1] Set the Time Differential Factor 
[2] Display the Time Differential Factor 


* Please pick an option number [2]: 


To show your system’s TDF, enter 2 or press the Return key to choose the 
default. The procedure displays the current TDF. For example: 


SYSTEM TIME DIFFERENTIAL FACTOR = 0:30 (1800 seconds). 
LOCAL SYSTEM TIME = 18-MAR-1994 03:06:25.52. 


To set your TDF, enter 1. The system prompts you to enter the TDF. 
* Enter the Time Differential Factor: 


Enter your TDF in hh:mm format, where hh indicates the number of hours 
and mm indicates the number of minutes. For example, if your system’s time 
zone is 5 hours behind UTC, enter —5:00. To determine the TDF for your time 
zone, see Figure 5-1. 


The system prompts you to indicate if you want to modify the local system 
time. Choose this option to adjust the time to daylight savings or standard 
time. 


* Do you wish to modify the local system time [N]: 


Alternatively, to adjust the local time to daylight savings or standard time 
you can submit the command procedure SYS$EXAMPLES:DAYLIGHT_ 
SAVINGS.COM as a batch job. 


Enter N if you are running this procedure only to set the TDF. 


Enter Y if you also want to change the local time. The system prompts you to 
enter a time value in hh:mm format to add to the local system time: 


* Enter the time value: 


To move the time back 1 hour, enter —1:00. To move the time ahead 1 hour, 
enter 1:00. 
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The system displays the new information and prompts you to indicate if you 
want to continue: 


NEW SYSTEM TIME DIFFERENTIAL FACTOR = 5:00. 
ADDING -1:00 TO THE LOCAL TIME. 


* Continue? [Y]: 


Enter N to cancel the change or press Return to complete the change. The 
system displays the new time. For example: 


SYSTEM TIME DIFFERENTIAL FACTOR = 5:00 (18000 seconds). 
LOCAL SYSTEM TIME = 18-MAR-1994 02:07:25.90. 


7. Choose Option 0 to exit from the procedure. 


Example 
The following example displays the TDF and the local system time: 


$ @SYSSMANAGER:UTCSCONFIGURE_TDF.COM 


Configuring the Time Differential Factor 


Enter ? anytime for help © 


[0] Exit 
[1] Set the Time Differential Factor 
[2] Display the Time Differential Factor 


* Please pick an option number [2]: [Retum] 


SYSTEM TIME DIFFERENTIAL FACTOR = 0:30 (1800 seconds). 
LOCAL SYSTEM TIME = 18-MAR-1994 03:06:25.52. 


The following example changes the TDF for a system, and also moves the local 
time back 1 hour: 


$ @SYSSMANAGER: UTCSCONFIGURE_TDF.COM 


Configuring the Time Differential Factor 
Enter ? anytime for help 


[0] Exit 
[1] Set the Time Differential Factor 
[2] Display the Time Differential Factor 


* Please pick an option number [2]: 1 


The Time Differential Factor (TDF) is the difference 


between your system time and Coordinated Universal Time (UTC). 
The difference is expressed in hh:mm format. The Americas 
have negative offsets from UTC, while Europe, Africa, Asia 
and Australia have positive offsets from UTC. 


* Enter the Time Differential Factor: 5:00 


If this is a seasonal time change, it may also be 
necessary to modify the system time. Generally, 

seasonal time changes result in adding 1:00 hour, 
or adding -1:00 hour to the local time. 


* Do you wish to modify the local system time [N]: Y 


Enter the time value you would like to add to 
the local time. The value can be a positive or 
a negative (-hh:mm) value. 


* Enter the time value: -1:00 
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NEW SYSTEM TIME DIFFERENTIAL FACTOR = 5:00. 
ADDING -1:00 TO THE LOCAL TIME. 


* Continue? [Y]: Y 


SYSTEM TIME DIFFERENTIAL FACTOR = 
LOCAL SYSTEM TIME = 


5:00 (18000 seconds). 
18-MAR-1994 02:07:25.90. 


5.8 Saving Your Customization 


Once you have installed and customized your system, Digital recommends that 
you save a copy of the system. To do so, perform the following steps: 


<i> 


1. 


On VAX systems, back up the console volume (if applicable). 


If your computer has a console storage device, you should make a backup copy 
of your console volume; it is useful to have a backup copy in case your original 
becomes corrupted. The operating system provides a command procedure 
called CONSCOPY.COM in the SYS$UPDATE directory that copies your 
console volume to a blank one. 


The procedure for backing up the console volume varies for different 
computers. For specific instructions on backing up the console volumes, see 
the upgrade and installation supplement for your VAX computer. ¢ 


If you have Digital’s OpenVMS ConDist compact disc, you can use the 
standalone BACKUP located there. 


Otherwise, on AXP and VAX systems, build a standalone BACKUP kit. You 
can build and boot standalone BACKUP in the following locations: 


Media Types Location 

Console media (if applicable)’ Console storage device 
Files—11 system disk Root directory SYSE 
Files—11 disk (not a system disk) Root directory SYSO 


10n AXP systems, you cannot boot standalone BACKUP from tape. On VAX systems, as of 
OpenVMS Version 6.0, if your system uses TU58 or RX01 console media, you cannot build 
standalone BACKUP on the console media. Instead, use the VMS Version 5.5-n standalone 
eee a your console media, or build standalone BACKUP on a Files—11 disk such as your 
system disk. 


Digital recommends you build standalone BACKUP on your system disk. 
Booting standalone BACKUP from your system disk is quicker than booting 
standalone BACKUP from your console volume. 


For specific instructions on building standalone BACKUP, see one of the 
following manuals: 


® On VAX systems, see the upgrade and installation supplement for your 
VAX computer. 


¢ On AXP systems, see the Upgrade and Installation Manual. 


Back up the system disk. Digital recommends that you use standalone 
BACKUP, which uses a subset of Backup utility qualifiers. For specific 
instructions on backing up the system disk, see Section 10.17. 
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Managing User Accounts 


This chapter describes how to grant access to users on your system. It tells you 
how to add and maintain user accounts, and it describes the privileges that you 
can give and the resources that you can allocate to the users on your system. It 
also describes the system management features of the OpenVMS Mail utility. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 
Maintaining the user authorization file (UAF) Section 6.2.1 
Preparing to add user accounts Section 6.3 
Using login procedures for interactive accounts Section 6.4 
Adding a user account Section 6.5 
Modifying a user account Section 6.7 
Maintaining the user environment Section 6.9 
Deleting a user account Section 6.10 
Restricting the use of accounts Section 6.12 


Using login procedures for restricted accounts 
Setting up special accounts 


Managing MAIL accounts 


Section 6.12.4 
Section 6.13 
Section 6.14 


This chapter explains the following concepts: 


Concept Section 
Understanding the user authorization file (UAF) Section 6.1 
Understanding UAF login checks Section 6.2 
Understanding account. security considerations Section 6.3.3 
Understanding system resources Section 6.15 


6.1 Understanding the User Authorization File (UAF) 


The system UAF file, SYS$SYSTEM:SYSUAE.DAT, contains user account 
records. Each record consists of fields that provide information about the 
account’s user name, login characteristics, login restrictions, and resource control 
attributes. You specify the account user name as a parameter to AUTHORIZE 
commands; the other fields are specified as qualifiers to AUTHORIZE commands. 


The system uses the UAF to validate login requests and to set up processes for 
users who successfully log in. You create, examine, and modify UAF records with 
the Authorize utility (AUTHORIZE). 
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You can assign the following resource control attributes in the UAF record: 
e Priority 

e Limits and quotas 

e 6Privileges 

e Identifiers 


The following sections briefly discuss these resource control attributes. 


6.1.1 Priority 


A user’s priority is the base process priority that the system uses to schedule 
computer time for the process associated with the user’s account. Priorities range 
in value from a low of 0 to a high of 31; 0 through 15 are timesharing priorities 
and 16 through 31 are real-time priorities. 


The system schedules processes with real-time priorities strictly according to base 
priority—the executable real-time process with the highest base priority executes 
first. Processes with timesharing priorities are scheduled according to a slightly 

different principle, to promote equitable service to all users. . 


Leave the base priority at the default of 4 for timesharing accounts. 


6.1.2 Limits and Quotas 
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Limits are set on system resources that can be reused; for example, the amount 
of memory that a process can use for I/O requests. Most limits restrict the use of 
physical memory. You set limits for processes associated with accounts through 
the appropriate UAF fields. You can change some of these limits later with DCL 
commands or by calling system services from programs. 


A process passes on its resources to a subprocess (for example, when you create a 
subprocess with the SPAWN command) in one of several ways, depending on the 
resource type. Table 6—1 lists the different resource types. 


Table 6-1 Resource Types 


Resource Type Description 

Pooled A process and its subprocesses share the resource on a first- 
come, first-served basis until the limit is reached. 

Nondeductible A subprocess receives the same limit on the resource as the 
creator receives. The creator’s limit is not affected. 

Deductible A subprocess receives a portion of the creator’s resource. That 
portion is deducted from the creator’s limit. 

Systemwide A process and all created subprocesses with the same user name 
or account share the total limit on a first-come, first-served 
basis. 


Normally, you should leave limits at their default values. For the default values 
for the system and user accounts, see the sample SYSTEM and DEFAULT user 
authorization file records supplied with the Authorize utility on your distribution 
kit. Also see Section 6.15 for a full description of limits and quotas. 


6.1.3 Privileges 
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Privileges determine what functions users are authorized to perform on the 
system. System manager functions require privileges that are denied to most 
users. Because the SYSTEM account has full privileges by default, you should 
exercise caution in using it. For example, if you log in to the SYSTEM account, 
you can modify and delete any file regardless of its protection. 


Table 6-2 categorizes VAX system privileges and includes a brief definition of the 
activity permitted with each privilege. See the OpenVMS VAX Guide to System 


Security for a full description of privileges. 


Table 6-2 System Privileges (VAX Only) 


Category 


None 


Normal 
Group 


Devour 


System 


Objects 


Privilege 


None 


NETMBX 
TMPMBX 


GROUP 
GRPPRV 


ACNT 
ALLSPOOL 
BUGCHK 
EXQUOTA 
GRPNAM 
PRMCEB 
PRMGBL 
PRMMBX 
SHMEM 


ALTPRI 
AUDIT 
OPER 
PSWAPM 
SECURITY 
SYSLCK 
WORLD 


DIAGNOSE 
IMPORT 
MOUNT 
SYSGBL 
VOLPRO 
READALL 


Activity Permitted 


None requiring privileges 


Create network connections 
Create temporary mailbox 


Control processes in the same group 
Group access through system protection field 


Disable accounting 

Allocate spooled devices 

Make machine check error log entries 

Exceed disk quotas 

Insert group logical names in the name table 
Create/delete permanent common event flag clusters 
Create permanent global sections 

Create permanent mailboxes 

Create/delete structures in shared memory 


Set base priority higher than allotment 
Generate audit records 

Perform operator functions 

Change process swap mode 

Control any process 

Perform security-related functions 
Lock systemwide resources 


Diagnose devices 

Mount a nonlabeled tape volume 

Execute mount volume QIO 

Create systemwide global sections 

Override volume protection 

Bypass existing restrictions to read an object 


(continued on next page) 
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Table 6-2 (Cont.) System Privileges (VAX Only) 


Category Privilege Activity Permitted 
All BYPASS Disregard protection 
CMEXEC Change to executive mode 
CMKRNL Change to kernel mode 
DETACH Create detached processes of arbitrary UIC 
DOWNGRADE Write to a lower secrecy object or lower an object’s 
classification 
LOG_IO Issue logical I/O requests 
PFNMAP Map to specific physical pages 
PHY_IO Issue physical I/O requests 
READALL Possess read access to all system objects 
SETPRV Enable any privilege 
SHARE Access devices allocated to other users 
SYSNAM Insert system logical names in the name table 
SYSPRV Access objects through system protection field 
UPGRADE Write to a higher integrity object or raise an object’s 
integrity level ¢ 
AXP Table 6-3 categorizes AXP system privileges and includes a brief definition of the 


activity permitted with each privilege. See the OpenVMS AXP Guide to System 
Security for a full description of privileges. 


Table 6-3 System Privileges (AXP Only) 


Category 


None 


Normal 


Group 


Devour 


System 
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Privilege 


None 


MOUNT 
NETMBX 
TMPMBX 


GROUP 
GRPPRV 


ACNT 


ALLSPOOL 


BUGCHK 
EXQUOTA 
GRPNAM 
PRMCEB 
PRMGBL 
PRMMBX 
SHMEM 


ALTPRI 
OPER 
PSWAPM 
WORLD 


SECURITY 


SYSLCK 


Activity Permitted 
None requiring privileges 


Execute mount volume QIO 
Create network connections 
Create temporary mailbox 


Control processes in the same group 
Group access through SYSTEM protection field 


Disable accounting 

Allocate spooled devices 

Make bugcheck error log entries 

Exceed disk quotas 

Insert group logical names in the name table 
Create/delete permanent common event flag clusters 
Create permanent global sections 

Create permanent mailboxes 

Create/delete structures in shared memory 


Set base priority higher than allotment 
Perform operator functions 

Change process swap mode 

Control any process 

Perform security-related functions 
Lock systemwide resources 


(continued on next page) 
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Table 6-3 (Cont.) System Privileges (AXP Only) 


Category Privilege Activity Permitted 

Files DIAGNOSE Diagnose devices 
SYSGBL Create systemwide global sections 
VOLPRO Override volume protection 

All BYPASS Disregard protection 
CMEXEC Change to executive mode 
CMKRNL Change to kernel mode 
DETACH Create detached processes of arbitrary UIC 
LOG_IO Issue logical I/O requests 
PFNMAP Map to specific physical pages 
PHY_IO Issue physical I/O requests 
READALL Possess read access to all system objects 
SETPRV Enable any privilege 
SHARE Access devices allocated to other users 
SYSNAM Insert system logical names in the name table 
SYSPRV Access objects through SYSTEM protection field ¢ 


Because certain images (such as SET.EXE) require access to the system UAF 
and are normally installed with the SYSPRV privilege, make sure you always 
grant system access to SYSUAF.DAT. The authorization files, SYSUAF.DAT and 
NETPROXY.DAT, are created with the following default protection: 


SYSUAF.DAT S:RWED, O:RWED, G, W 
NETPROXY. DAT S:RWED, O:RWED, G:RWE, W 


To list the protection codes for any file, use the DCL command 
DIRECTORY/PROTECTION. 


On VAX systems, the RIGHTSLIST.DAT authorization file is created with the 
following default protection: 


RIGHTSLIST.DAT S:RWED, O:RWED, G:RWE, W 


If you need to maximize the protection for SYSUAF.DAT or NETPROXY.DAT, use 
the DCL command SET SECURITY/PROTECTION in the following format: 


$ SET SECURITY/PROTECTION=(S:RWED,0,G,W) SYS$SYSTEM:filename 


On AXP systems, the RIGHTSLIST.DAT authorization file is created with the 
following default protection: 


RIGHTSLIST.DAT S:RWED, O:RWED, G:RWE, W:R 


If you need to maximize the protection for SYSUAF.DAT or NETPROXY.DAT, use 
the DCL command SET PROTECTION in the following format (note, however, 
that RIGHTSLIST.DAT must be world readable): 


$ SET PROTECTION=(S:RWED,0,G,W) SYSSSYSTEM: filename 


The procedures for adding a user account are discussed in detail later in this 
chapter. Because the UAF is the prime repository for storing information about 
user accounts, it is important to understand its components before you add 
accounts. 
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6.2 Understanding UAF Login Checks 


To help you understand the effect of login restrictions, this section describes how 
the system checks the login fields of the UAF when a user attempts to log in. 


When a user activates a terminal (by turning it on and pressing Return if directly 
connected, by dialing in to a system and observing the remote connect protocol, 
or by connecting via a LAT), and that terminal is not allocated by a user process, 
the system prompts for a name and password. The person using the terminal 
must enter a name and password combination that exists in a UAF record, or the 
system denies the user further access. If the name and password are accepted, 
the system performs the operations in Table 6-4. 


Table 6-4 System Login Flow 


Step 
1. 
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Action 


Result 


System examines the login flags |The system begins with DISUSER. If the DISUSER flag is set, 


the login attempt fails. Note that setting this flag for powerful, 
infrequently used accounts (such as SYSTEST and FIELD) 
eliminates the risk of guessed passwords for those accounts. 
Digital recommends that you limit access of the SYSTEM 
account by using access times and day types. See Section 6.12.1 
and Section 6.12.2. 


System verifies primary or After checking the current day type, the system determines 
secondary day restrictions whether hourly login restrictions are in effect (as defined by the 


/ACCESS, /DIALUP, /INTERACTIVE, /LOCAL, and /REMOTE 
qualifiers). If the current hour is restricted, the login fails 


immediately. 
System passes control to the The command interpreter is named in the user’s UAF record; 
command interpreter for example, DCL. 
System checks whether If yes, the logical name is translated (in most cases to 
SYS$SYLOGIN is defined SYS$MANAGER:SYLOGIN.COM) and that procedure executes. 


If SYS$SYLOGIN is not defined, no system login is run. 


If a command procedure is specified in the LGICMD field and 
that procedure exists, it executes. Otherwise, if the LGICMD 
field is blank, the user’s command file named LOGIN.COM 
(located in the SYS$LOGIN directory) executes automatically (if 
it exists). 

The system will not execute both a command procedure specified 
in the LGICMD field and a user’s LOGIN.COM file; if a 
procedure is specified in the LGICMD field, the system will 

use that procedure by default. You can, however, instruct the 
system to execute a user’s LOGIN.COM by calling it from 
within the procedure specified in LGICMD. 


After a successful login, the command interpreter prompts for user input (DCL 
usually displays a dollar sign), and the_user responds with commands acceptable 
to the command interpreter. (DCL accepts those commands documented in the 
OpenVMS DCL Dictionary.) However, the system prohibits activities that violate 
the user’s privilege allowance or exceed resource quotas. 
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6.2.1 Maintaining the UAF 


Typically, you use the UAF supplied with the distribution kit. (You can, however, 
rename the UAF with the DCL command RENAME, and then create a new UAF 
with AUTHORIZE.) Allow access to this file only from the SYSTEM account; see 

the AUTHORIZE section in the OpenVMS System Management Utilities Reference 
Manual for guidelines on protecting system files. 


The UAF is accessed as a shared file, and updates to the UAF are made on a 
per-record basis, which eliminates the need for both a temporary UAF and a new 
version of the UAF after each AUTHORIZE session. Updates become effective 
as soon as AUTHORIZE commands are entered, not after the termination of 
AUTHORIZE. (For this reason, do not enter temporary values with the intent of 
fixing them later in the session.) 


Immediately after installing the system, make changes to the UAF in the 
following accounts: SYSTEM, FIELD, SYSTEST, DEFAULT, and SYSTEST_ 
CLIG. 


How to Perform This Task 


1. Change the passwords in the SYSTEM, FIELD, and SYSTEST accounts 
immediately, if you have not already done so during the installation. Use 
obscure passwords of eight characters or more and continue to change them 
on a regular basis. Do not permit general users access to these accounts. 


In addition to changing the password, you can disable an account, especially if 
it is used infrequently. To disable an account, use the AUTHORIZE command 
in the following format: 


MODIFY username/FLAGS=DISUSER 
For example: 


$ RUN SYSSSYSTEM: AUTHORIZE 
UAF> MODIFY WOLF/FLAGS=DISUSER 


The login flag DISUSER disables the account and prevents anyone from 
logging in to the account. To enable the account when it is needed, run 
AUTHORIZE and enter the command in the following format: 


MODIFY username /FLAGS=NODISUSER 


Caution 


Be careful not to disable all of your privileged system accounts. If you 
inadvertently do so, you can recover by setting the system parameter 
UAFALTERNATE during a conversational boot operation. See Chapter 4 
for information on emergency startup procedures. 


2. You may want to change several fields in the default account. For example: 
UAF> MODIFY DEFAULT/DEVICE=DISKSUSER/WSQUO=750 


The default device is set to the name most commonly used for user accounts 
that will be added. Likewise, the working set value is set to a value 
appropriate for most users on the system. 
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Use the SYSTEM account only for system functions such as performing backups 
and installing maintenance updates. The SYSTEM account has full privileges 
enabled by default, so exercise caution when you use it. For example, because 
you have BYPASS privilege, the system will allow you to delete any file, no 
matter what its protection. If you enter an incorrect name or spurious asterisk, 
you may destroy files that you or other users need to keep. Consider using an 
account with fewer privileges for daily system management activities. 


If you decide not to use the SYSTEM account for daily system management 
activities, you can still receive mail from the SYSTEM account. To do this, log in 
to the SYSTEM account, invoke MAIL, and use the SET FORWARD command in 
the following format to forward the mail to another account: 


SET FORWARD node::username 
For example: 


$ MAIL 
MAIL> SET FORWARD WINSTON: : WOLF 
MAIL> EXIT 


6.2.2 Understanding the System-Supplied UAF Records 


The Authorize utility provides a set of commands and qualifiers to assign values 
to any field in a UAF record. See the Authorize utility section in the OpenVMS 

System Management Utilities Reference Manual for complete information about 

UAF record fields and the commands and qualifiers used to assign attributes to 

these fields. ; 


The software distribution kit provided with a new operating system contains a 
UAF of four records: DEFAULT, FIELD, SYSTEM, and SYSTEST. 


UAF Record __ Description 


DEFAULT Serves as a template for creating user records in the UAF. A new user 
record is assigned the values of the DEFAULT record except where you 
explicitly override those values. Thus, whenever you add a new account, 
you need only specify values for fields that you want to be different. The 
default record cannot be renamed or deleted from the UAF. 


Section 6.5 gives an example of how to use AUTHORIZE to add a user 
account. Section 6.9.1 explains how to create and use additional default 
templates. 


' FIELD Permits Digital Services personnel to test a new system. Disable the 
FIELD record once the system is installed, as described in Section 6.2.1. 


SYSTEM Provides a means for you to log in with full privileges. You can modify 
the record for the system manager’s account but you cannot rename it or 
delete it from the UAF. 


Caution: Do not change the SYSTEM account UAF record fields for the 
default device and directory and privileges. Installation of maintenance 
releases of the operating system and optional software products depends 
on certain values in these fields. 


Take note of any hourly or daily restrictions that you have implemented 
on the SYSTEM account when performing upgrades from the SYSTEM 
account. 


SYSTEST Provides an appropriate environment for running the User Environment 
Test Package (UETP). The SYSTEST record should be disabled once the 
system is installed (see Section 6.2.1). 
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Example 


The following AUTHORIZE command creates a new record having the same 
values as the DEFAULT record, except that the password, UIC, and default 
directory fields are changed: 


UAF> ADD MARCONI/PASSWORD=QLP6YT9A/UIC=[ 033,004] /DIRECTORY=[MARCONT ] 


6.2.3 Using AUTHORIZE to Maintain UAF Records 


Using the Authorize utility, you create and maintain UAF records by assigning 
values to various fields within each record. The values you assign do the 
following: 


e Identify the user 

¢ Define the user’s work environment 

¢ Control use of system resources 

How to Perform This Task 

1. Gain access to a specific user record by running AUTHORIZE. 

2. Enter the SHOW command (see example) to display a specific user record. 


3. Enter AUTHORIZE commands such as ADD and MODIFY to create or change 
the information in the fields of the UAF record. 


See Section 6.15 for a list of privileges, limits, and quotas that you can specify in 
the resource control and privileges fields of the UAF record. 


Example 


$ RUN SYSSSYSTEM: AUTHORIZE 
UAF> SHOW WELCH 


The following example shows a typical user record for a restricted user account. 
Callouts describe the fields. 


Username: WELCH Owner: ROB WELCH @ 
Account: INVOICE UIC: [21,51] ([INV,WELCH]) 
CLI: DCL Tables: DCLTABLES @ 
Default: USER3: [WELCH] 

LGICMD: 

Login Flags: Diswelcome Disnewmail © 
Primary days: Mon Tue Wed Thu Fri 

Secondary days: Sat Sun 


Primary  000000000011111111112222 Secondary 000000000011111111112222 
Day Hours 012345678901234567890123 Day Hours 012345678901234567890123 


Network: ------ No acceSS ------~ wren Full access ------ 
Batch: XXXXXXXXX-------- XXXXXXX 0 ween XXXXXXXXX------ 
Local: XXXXXXXXX-------- XXXXXXX 0 eee nner XXXXXXXXX------ 
Dialup: ----- Full access ------ wee No access ------- 
Remote: ----- Full access ------ wee No access ------- 
Expiration: (none) Pwdminimum: 6 Login Fails: 0 
Pwdlifetime: 30 Pwdchange: 15-APR-1993 13:58 
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Last Login: (none) (interactive), (none) (non-interactive) 
Maxjobs: 0 Fillm: 20 Bytlm: 8192 
Maxacct jobs: 0 Shrfillm: Q Pbytlm: 0 
Maxdetach: 0 BIOlm: 10 JTquota: 1024 
Prcelm: 2 DIOlm: 10 WSdef: 150 
Prio: 4 AST1m: 10 WSquo: 256 
Queprio: 4 TQEI1m: 10 WSextent: 512 
CPU: (none) Enqlm: 100 Pgflquo: 10240 


Authorized Privileges: 
TMPMBX NETMBX © 

Default Privileges: 
TMPMBX NETMBX 


Identifier @ Value Attributes @ 
PROJECT X $X8001001E RESOURCE NODYNAMIC 
DOCU_PROC %X80010044 NORESOURCE NODYNAMIC 


@ User identification fields contain information used by the system for 
accounting purposes and user identification. 


© Default fields contain the default specifications for the following: 


¢ Command language interpreter (CLI) is DIGITAL Command Language 
(DCL) by default. 


¢ Name of the command procedure to be executed automatically at login 
time. If the field is blank, SYS$LOGIN:LOGIN.COM is executed by 
default. 


¢ Command language interpreter tables (if blank, same as CLI field). 
e Device and directory names for default file access. 


© Login characteristics fields impose specific login restrictions that do the 
following: 


¢ Inhibit certain login functions. 
¢ Control the days of the week when various types of logins are permitted. 
¢ Control the times of day when various types of logins are permitted. 

@ Resource control fields control system resources by: 


e Limiting the use of system resources such as physical memory and CPU 
time. 


¢ Specifying the base priority used in scheduling the process that the 
system creates for the user. 


© Privileges fields specify the privileges that allow use of restricted and 
sensitive system functions. 


@ Identifier fields list the ACL identifiers that the user holds and that are 
recorded in the rights database file. 


@ Attributes fields list the characteristics specified when adding identifiers to 
the rights database or when granting identifiers to users. 
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6.3 Preparing to Add User Accounts 


This section describes what you need to do prior to adding a user account. 


6.3.1 Choosing an Account Type 


How you set up a user account depends on the needs of the individual user. 
Table 6-5 lists the account types and their characteristics. 


Table 6-5 Account Types 


Account Type 


Interactive 


Limited Access 


Characteristics 


This account has access to the system software. Work of a general nature, such 
as program development or text editing, is performed in this account. Usually, 
such an account is considered an individual account. 


This account provides controlled login to the system and, in some cases, has 
only a subset of user software available. Limited-access accounts ensure that 
the system login command procedure (SYLOGIN.COM) and the process login 
command procedure (specified by the /LGICMD qualifier in the UAF), as well 
as any command procedures they call, are executed. (See the Security Guide for 
information about writing limited access account command procedures.) There 
are two types of limited accounts: restricted and captive. 


Restricted Used for network objects like MAIL, for network proxy 
accounts, or for implementing user authentication systems 
like smart cards. 


Captive Limited by function; that is, only those who perform a 
particular function can use it (for example, an inventory 
system). Anyone whose job entails inventory control can 
access your system, but that person cannot access other 
subsystems or the base software. Other applications of a 
captive account might be to run batch operations during 
unsupervised periods or to run applications programs with 
information you want to keep private. 


6.3.2 Other Tasks to Perform 


When adding a user account, you must do the following: 


1 
2 
3. 
4 


7. 


Select a user name and password. 
Select a user identification code (UIC). 
Decide where the account’s files will reside (which device and directory). 


Use the System Management utility (SYSMAN) to add a disk quota entry 
for this UIC, if disk quotas are in effect. You can do this only after you have 
created the user’s account with the Authorize utility. 


Create a default directory on the appropriate volume, using the following 
DCL command format: 


CREATE/DIRECTORY directory-spec/OWNER_UIC=uic 


Determine the security needs of the account (that is, the level of file 
protection, privileges, and access control). 


Establish any login/logout command procedures. 


These tasks are described in detail in the sections that follow. When you have 
completed the tasks for preparing to add a user account, you are ready to add the 
account by following one of the methods described in Section 6.5 and Section 6.6. 
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6.3.2.1 Selecting a User Name and Password 
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To determine a user name and password, use naming conventions that take 
into consideration the nature of the account. For example, some installations 
use the name of the person who will use the account. Captive accounts, on the 
other hand, often use a name that describes the function of the account. Thus, 
an interactive or restricted account for Robert Jones might have a user name 
of JONES, while a captive account for an inventory system might be called 
INVENTORY. Remember to assign unique user names. 


For interactive accounts, it is best to let the person using the account control 
the password. Initially, provide a simple password and force the user to 

change the password at first login by using the AUTHORIZE qualifier 
/FLAGS=DISFORCE_PWD_CHANGE. Only the person using the account need 
know the password. Encourage all users to set obscure passwords of at least eight 
characters and to change them frequently, or force the use of generated passwords 
with the /FLAGS=GENPWD and /GENERATE_PASSWORD qualifiers. 


You can use the /PWDMINIMUM and /PWDLIFETIME qualifiers with 
the AUTHORIZE command ADD or MODIFY to enforce timely password 
modifications. The following table lists the qualifiers and specific action. 


Qualifier Action 

/PWDMINIMUM Specifies the minimum password length in characters (default 
is 6). 

/PWDLIFETIME Specifies a delta-time value. One week before that date, the 


system issues a warning message to the user. On that date, 
the password expires if it has not been changed. 


/GENERATE_ Invokes a password generator to generate user passwords. 
PASSWORD 
/FLAGS=GENPWD Allows you to force use of the automatic password generator 


when a user changes a password. Consider using the password 
generator for privileged accounts or whenever a user has access 
to sensitive data. 


For captive accounts, the degree of sensitivity of the data used by the account 
should determine the type of password. For example, the password for a payroll 
application should be obscure, while the password for a suggestions account might 
not even be required; it could be null (in which case users would not be prompted 
for the password). 


Prohibit users from changing the passwords of captive accounts. To do this, 
specify /FLAGS=LOCKPWD when you create the captive account. Change the 
password whenever you feel it might be compromised (for example, if a person 
using the account moves to another job). To change a user’s password, enter the 
command MODIFY user-name /PASSWORD=new_password at the UAF> prompt. 


See the OpenVMS System Management Utilities Reference Manual for more 
information about AUTHORIZE. 
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6.3.2.2 Assigning the User Identification Code (UIC) 


Assign each account a unique user identification code (UIC). A UIC has two 
formats: alphanumeric and numeric. 


The alphanumeric UIC consists of a member name and, optionally, a group 
name separated by a comma and enclosed within brackets (for example, 
[DOCO,PRICE]). These identifiers may also appear as numeric characters 
consisting of a group identifier and a member identifier in octal (for example, 
[11,200]). 


Assign accounts the same group number if their owners perform similar work, 
access the same files frequently, or use many of the same logical names. See the 
Security Guide for a detailed discussion of the user identification code. 


Note 
Digital reserves UIC group 1 and group 300-377. 


6.3.2.3. Adding a Disk Quota Entry 


Disk quotas limit the amount of disk space available to individual users on a 
particular volume. If disk quotas are in effect for a disk volume, run the System 
Management utility (SYSMAN) and use the DISKQUOTA command to add an 
entry for the new UIC as follows: 


1. Invoke SYSMAN. 
2. Define the management environment to be node LARRY. 


3. Add a disk quota entry on the volume DISK$USER for UIC [014,JONES]. The 
entry has a permanent quota of 2000 blocks and an overdraft of 500 blocks. 


4, Exit from the utility. 


Example 


$ RUN SYSSSYSTEM:SYSMAN 

SYSMAN> SET ENVIRONMENT /NODE=LARRY 

SYSMAN> DISKQUOTA ADD [014,JONES]/DEVICE=DISKSUSER/PERMQUOTA=2000/OVERDRAFT=500 
SYSMAN> EXIT 


The sum of the quota and overdraft values is the absolute maximum number 
of blocks allotted to the user, which in this example is 2500 blocks. For more 


information on SYSMAN and establishing disk quotas, see the OpenVMS System 
Management Utilities Reference Manual. 


6.3.2.4 Setting the User Default Device for an Interactive Account 
For each interactive account, create a top-level (default) directory (using the 
DCL command CREATE/DIRECTORY). In the directory place a login file, login 
file template, and/or logout file, as appropriate. The interactive user creates 
and maintains files and subdirectories in this directory. Make the owner of the 
directory the UIC for the new account. Usually, you also use the name of the 
account for the default directory. 


Example 


If you have decided on an account name of JONES and a UIC of [014,1], you 
would enter the following DCL command to create a default directory for the 
account on the volume DISK$USER: 


$ CREATE/DIRECTORY DISKSUSER: [JONES] /OWNER_UIC=(014,1] 
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The volume on which the directory is established depends on which devices you 
reserve for interactive accounts and how much space is available on each. 


The default file specification you provide the new account (when you run 
AUTHORIZE) should be the name of the device and the name of the top-level 
directory you used in the DCL command CREATE/DIRECTORY. 


6.3.2.5 Setting the User Default Device for a Captive Account 


For a captive account, whether you create a top-level directory depends on the 
nature of the user system. If people use files in a particular directory, you 
should make that directory the default directory specification. For example, 
if the inventory system uses the files DISK$DATA:[INV]JSTOCK1.DAT and 
DISK$DATA:[INV]STOCK2.DAT, the default device specification should be 
DISK$DATA: and the default directory specification should be [INV]. 


6.3.3 Understanding Account Security Considerations 


Q 


BG 
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The level of security that you establish for an account depends on the purpose 
of the account and whether it is shared with other users or groups. For an 
interactive user account, the default UIC-based protection is usually adequate. 
The default protection for top-level directories is no world access. 


On VAX systems, users can further protect their files and subdirectories on an 
individual basis with the DCL command SET SECURITY. ¢ 


On AXP systems, users can further protect their files and subdirectories on an 
individual basis with the DCL command SET FILE/PROTECTION. ¢ 


In some cases (such as project accounts) you may want to set up an additional 
level of protection by using access control lists (ACLs). ACL-based protection 
provides a more refined level of security in cases where different groups or 
members of overlapping groups share access to an account such as a project 
account. 


On VAX systems, ACLs offer a way to grant or deny users access to any security- 
relevant object. ¢ 


On AXP systems, ACLs offer a way to grant or deny users access to specific 
objects such as files, directory files, global sections, devices, system logical name 
tables, and queues. ¢ 


The rights database (RIGHTSLIST.DAT) is a file that associates users of the 

system with access-controlling identifiers. When a user logs in, the system checks 
the rights database for the identifiers that the user holds. You use the Authorize 
utility to maintain the rights database by adding or deleting identifiers as needed. 


By allowing a group of users to hold common identifiers, you can create a group 
protection scheme that is more intricate than that provided by the UIC-based 
protection. 


Section 6.13.2 describes how to set up a project account with ACL-based 
protection. For more information on how to set up and edit ACLs, see the 
Security Guide and the OpenVMS System Management Utilities Reference 
Manual. 
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i> On VAX systems, protected subsystems provide conditional access to data. Ina 
protected subsystem, an application protected by normal access controls serves 
as a gatekeeper to objects belonging to the subsystem. While users are running 
the application, their process rights list contains identifiers giving them access to 
objects owned by the subsystem. As soon as they exit from the application, these 
identifiers and, therefore, the users’ access rights to objects are taken away. For 
more information, see the OpenVMS VAX Guide to System Security. ¢ 


6.4 Using Login Command Procedures for Interactive Accounts 


For all accounts, login command procedures contain commands commonly 
executed at the beginning of every user session. These commands do such tasks 
as the following: 


e Define symbols 

e Assign logical names 

¢ Display messages and the time of day 

e Set terminal characteristics 

¢ Define keys to perform certain functions 

e Set process default file protection (SET PROTECTION/DEFAULT) 


Login command procedures are useful for saving keystrokes and standardizing 
operations. In establishing login command procedures for interactive accounts, 
you have the following choices: 


e System—As system manager, you normally create and maintain a standard 
login command procedure in the system directory (the file is usually named 
SYS$MANAGER:SYLOGIN.COM). You then assign the logical name 
SYS$SYLOGIN to the name of the file so that whenever a user logs in, the 
procedure is executed. 


e JIndividual—For any or all accounts, you may specify an additional login 
command procedure with the /LGICMD qualifier of the AUTHORIZE 
commands ADD, MODIFY, or COPY. You can give the login command 
procedure any valid file specification. Whenever the user logs in, the 
additional procedure is executed after SYS$SYLOGIN. 


¢ User-specified command file—If individual or system login command 
procedures are not implemented, the system looks for a command file called 
LOGIN.COM in the user’s login directory (as defined by the UAF record 
device and directory fields). If the file is found, the system executes it. This 
command file is developed and maintained by the user and should follow 
these conventions: 


— Device and directory names must take the default file specification for the 
account. 


— The file name and file type must be LOGIN.COM. 


As an aid to new users, you might copy a login command procedure template 

into newly created top-level directories. However, to ensure proper ownership 
of the file, change the owner UIC of the file to that of the user. You make this 
change with the DCL command SET FILE/OWNER. 


Example 6-1 and Example 6—2 illustrate typical system and user-specified login 
command procedures. 
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Example 6-1 Sample SYS$MANAGER:SYLOGIN.COM Login Command 
Procedure for a System Account 


FSVERIFY (0) 


FS 


—-MNM—H-W<s 


T 
T NOCONTROL=Y ! Do not allow Ctrl/Y to exit procedure 
T NOON 


Gi te 


Allow network jobs to start faster 
| 


IF FSMODE() .EQS. "NETWORK" THEN GOTO EXIT 
! 


! Enable Ctrl/T handling by DCL 
{ 


SET CONTROL=T 

t 

! Define Foreign Commands For Installed Utilities 
I 


USERS == "SHOW USERS" 


DISPLAY == "MONITOR PROCESSES/TOPCPU" 
INFO == "SHOW PROCESS/CONTINUOUS" 


SUSPEND == "SET PROCESS/SUSPEND" 
RESUME == "SET PROCESS/RESUME" 
SETNAME == "SET PROCESS/NAME" 


! 

! Define a symbol indicating whether the terminal 

! is on a dialup port 

! 

TT == FSGETDVI("TT", "DEVNAM")-"_" 

DIALUP == ((TT .GES. "TTGO:" .AND. TT .LES. "TTG4:") - 
OR. (TT .GES. "TTH1:" .AND. TT .LES. "TTH4:") - 
.OR. (TT .EQS. "TTI5:")) 

$ IF DIALUP THEN SET TERMINAL/INQUIRE 

$ ! 

SEXIT: 

$ IF V THEN SET VERIFY 


Wt TM TIT TNA ATTA TATA NANNANMNNNANnN NHMONNMNnYN 


$ SET CONTROL=Y 
$ EXIT 


As Example 6-1 shows, you can disable the Ctrl/Y function (which suspends 
execution of the current image and invokes the command interpreter) to force 
execution of the complete login command procedure whenever the user logs in. 
You do this with the DCL command SET NOCONTROL<&Y. Before the login 
command procedure exits, you should add the DCL command that resets the 
Ctrl/Y function (SET CONTROL=Y). 
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Example 6-2 Sample Login Command Procedure (LOGIN.COM) for a User 


Account 
$ SET NOON 
$ SET PROTECTION=(S=RD, O=RWED, G=R,W=R) /DEFAULT 
$ ! 
$ ! Define abbreviations for often used commands 
$ ! 
$ DIR*ECTORY == DIRECTORY/DATE/SIZE 
$ PU*RGE == PURGE/LOG 
$ DE*LETE == DELETE/LOG/CONFIRM 
$ | 
$! 
$ ! Other useful abbreviations 
$! 
$ SHP == "SHOW PROCESS/PRIVILEGES" 
$ PRI*NT == "PRINT/NOTIFY" 
$ SHD == "SHOW DEFAULT" 
$ UP == "SET DEFAULT [-]" 
$ SP == "SET PROCESS/PRIVILEGES=" 
$ SQ == "SHOW QUEUE/BATCH/ALL/DEVICE" 
$ H*OME == "SET DEFAULT SYSSLOGIN" 
$ SUB*MIT == "SUBMIT/NOTIFY" 
$ SPC == "SHOW PROCESS/CONTINUOUS" 
$ SYS == "SHOW SYSTEM" 
$ DAY == "SHOW TIME" 
$! . 
$ ! Set /LOG for all commands 
$ ! 
$ BACK*UP == "BACKUP/LOG" 
$ DEL*ETE == "DELETE/LOG" 
$ LIB*RARY == "LIBRARY /LOG" 
$ PUR*GE == "PURGE/LOG" 
$ REN*AME == "RENAME/LOG" 
$! 
$ ! End of LOGIN.COM processing 
$! 
$ GOTO ‘FSMODE() 
SNETWORK: 
$ EXIT 
SINTERACTIVE: 
$ VN == "SET TERMINAL/WIDTH=80" 
$ VW == "SET TERMINAL/WIDTH=132" 
$ EXPERT == "SET MESSAGE/NOFACIL/NOSEVER/NOIDENT" 
$ NOVICE == "SET MESSAGE/FACILITY/SEVERITY/IDENTIF" 
$ NOVICE 


$! 

$ ! Symbols for network users 
$ ! 

$ 


SYSA == "SET HOST SYSA" 
$ SYSB == "SET HOST SYSB" 
$ SYSC_ . == "SET HOST SYSC" 
$ EXIT ! End of interactive login 
SBATCH: 
$ SET VERIFY ! End of batch login 
$ EXIT 


6.4.1 Using Logout Command Procedures 


The system does not provide for automatic execution of a command procedure at 
logout time. However, you can supply one as follows. 
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How to Perform This Task 


1. Create a systemwide logout command procedure that executes whenever a 
user logs out (the file is usually named SYS$MANAGER:SYLOGOUT.COM). 


2. To ensure that this command procedure executes, include a command in 
SYS$MANAGER:SYLOGIN.COM that equates the most commonly used 
abbreviation of the LOGOUT command (often LO) to the execution of the 
logout command procedure. 


Example 
$ LO*GOUT:==@SYSSMANAGER : SYLOGOUT 


The last line of the logout command procedure then uses an alternate form of 
the LOGOUT command, such as a LOGOUTNOW command. (You can create 
any command name you like beginning with LO.) You cannot use the same 
abbreviation as used for the symbol (in this case LO) because it will start the 
procedure again. As an alternative, you could add the following command, just 
above the last line: 


$ DELETE/SYMBOL/GLOBAL LOGOUT 


6.5 Adding a User Account with AUTHORIZE 


Once you analyze the purpose of a user account and decide which attributes and 
resources it requires, you can use the Authorize utility to create the account. 


How to Perform This Task 
1. Give yourself the SYSPRV privilege: 
$ SET PROCESS/PRIVILEGE=SYSPRV 


2. Enter the following commands to set your default device and directory to 
SYS$SYSTEM and invoke AUTHORIZE: 


$ SET DEFAULT SYSSSYSTEM 
$ RUN AUTHORIZE 
UAF> 


3. When the utility responds with the UAF> prompt, use the AUTHORIZE 
command ADD to specify attributes in the UAF fields as shown in this 
example: 


UAF> ADD JONES/PASSWORD=LPB57WM/UIC=[014,1] - 
UAF> /DEVICE=DISKSUSER/DIRECTORY=[JONES] - 
“UAF> /LGICMD=DISKSUSER: [NEWPROD]GRPLOGIN - 
“UAF> /OWNER="ROBERT JONES" /ACCOUNT=DOC 


6.5.1 Choosing the Qualifiers 
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This section lists the qualifiers that you can use when setting up an account 
with AUTHORIZE. Table 6-6 lists the qualifiers under the account attribute that 
they affect. See Section 6.15.2 for a detailed description of each qualifier. For 

a complete list of Authorize qualifiers, see the OpenVMS System Management 
Utilities Reference Manual: A-L. 
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Table 6-6 Qualifiers Used with AUTHORIZE 


Limits and Quotas' 


/ASTLM /EXPIRATION /PGFLQUOTA 
/BIOLM /FILLM /PRCLM 
/BYTLM /JTQUOTA /TQELM 
/CPUTIME /MAXACCTJOBS /WSDEFAULT 
/DIOLM /MAXDETACH /WSEXTENT 
/ENQLM /MAXJOBS /WSQUOTA 
Priority” 

/PRIORITY 

Privileges 


/DEFPRIVILEGES /PRIVILEGES 


Primary and Secondary Login Times; Login Functions® 


/ACCESS INTERACTIVE /REMOTE 
/DIALUP /LOCAL 
/FLAGS /PRIMEDAYS 


1Default values are adequate in most cases. 
2Default values are usually adequate for accounts not running real-time processes. 


3By default, users are allowed to log in at any hour of any day. To override the setting of a particular 
day, use the DCL command SET DAY. Use this command if a holiday occurs on a day that would 
normally be treated as a primary day and you want it treated as a secondary day. See Section 6.12 for 
a discussion of using these fields to restrict login times and functions. 


6.6 Adding a User Account with a Command Procedure 


As an alternative to using the Authorize utility, you can use a command 
procedure to create user accounts. The ADDUSER.COM procedure, which is 
located in the SYS$EXAMPLES directory, is an example of such a procedure; it 
supplies prompts and several default values for creating the new account. 


You can modify ADDUSER.COM as appropriate for the needs of your system. 
To run ADDUSER.COM, log in to the SYSTEM account and enter the following 
command: 


$ @SYSSEXAMPLES : ADDUSER.COM 


ADDUSER.COM prompts you to enter values in a number of UAF record fields. 
If you press Return without specifying a value for a field, ADDUSER supplies the 
following default values: 


UAF Field Default Value 
User name No default; must supply 
Owner No default; must supply 
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UAF Field Default Value 

Password User name specified 

UIC group number 200 

UIC member number No default; must supply number 
Account name Optional 

Privileges TMPMBX,NETMBX 

Login directory User name specified 

Login device $DISK1 

Disk quota 1000 

Overdraft quota 100 


The UIC must be unique for the system. For example, each account in the UIC 
group 200 must have a unique member number. You can list the UICs currently 
assigned to users by entering a question mark (? ) after the UIC member 
number prompt. The account is not created until you have answered all of the 
questions in the procedure. The final prompt in the procedure is the following: 


Is everything satisfactory with the account [YES]? 
If you press the Return key, the account is created and remains in SYSUAF.DAT 
as specified. If you enter NO, the account is removed. 

Note 


If you press Ctrl/Y before, during, or directly after the account’s 
characteristics are displayed (that is, before you respond to the 
“satisfactory?” prompt), the account (or portions of it) will still be 
added. 


Make sure users log in to their account promptly to change the password. 


6.7 Modifying a User Account 
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To change a user account’s quotas, default directory, password, authorized 
privileges, or any other characteristics assigned by AUTHORIZE, use the 
MODIFY command. You can use the MODIFY command to change any of the 
fields in an existing user account. However, a user must log out and log in again 
for the modifications to take effect 


Example 


When a user forgets a password and cannot log in, use the MODIFY command 
in AUTHORIZE to reset a user password. For example, the following command 
changes the password for user WELCH to ROBWELCH: 


UAF> MODIFY WELCH/PASSWORD=ROBWELCH 


Note 


After logging in with the new password, users should immediately change 
their password with the DCL command SET PASSWORD. 
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Any changes that you make to a user’s record will take effect after the user next 
logs in. For example, suppose that user JONES currently has an open file quota 
(FILLM) of 20. To increase user Jones’ open file limit to 40, you would use the 
following command in AUTHORIZE: 


UAF> MODIFY JONES/FILLM=40 


Any process of user JONES that is logged in at the time that you modify the user 
authorization file continues to have a file limit of 20. In order to have an open file 
limit of 40, user JONES must log out and then log in again, after you have made 
the modification to the user authorization file using AUTHORIZE. 


6.8 Listing User Accounts 


Use the AUTHORIZE command LIST to create the file SYSUAF.LIS, containing a 
summary of all user records in the UAF. By default, the LIST command produces 
a brief report containing the following information from the UAF: 


e Account owner 

e User name 

e UIC 

e Account names 

e §6Privileges 

e Process priority 

e Default disk and directory 


Use the /FULL qualifier to create a full report of all the information (except user 
passwords) contained within the UAF. 


Examples 

1. The following example writes a brief report of the UAF to the output file 
SYSUAF.LIS: 
UAF> LIST 


SUAF-I-LSTMSG1, writing listing file 
$UAF-I-LSTMSG2, listing file SYSUAF.LIS complete 


2. The following example lists a full report of the UAF, including identifiers held 
by the users: 


UAF> LIST/FULL 


SUAF-I-LSTMSG1, writing listing file 
tUAF-I-LSTMSG2, listing file SYSUAF.LIS complete 


6.9 Maintaining the User Environment 


As the work requirements of your system change, you may need to do the 
following: 


¢ Create additional default records to serve as templates for new categories of 
users 


¢ Delete or disable the accounts of users who leave your site 
¢ Impose login restrictions to limit system use by certain accounts 


With the Authorize utility, you can perform these maintenance operations by 
modifying or deleting records in the UAF. 
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6.9.1 Creating Additional Default Record Templates 


On systems where all users perform the same type of work, you typically use the 
system-supplied default record, DEFAULT, as the template for adding new user 
records. You may find, however, that your system supports several different user 
categories, each category performing a specific type of work and requiring unique 
record attributes. Instead of always using the system-supplied default record as 
a template and making numerous changes each time you add a user record, you 
can create additional default UAF records to serve as templates for each user 
category. 


Before you create additional default records, you must decide the following: 
¢ What the individual user categories are 

¢ What attributes are common to each category 

¢ What to name the default records 


How to Perform This Task 


Once you define a user category and establish which record attributes are needed, 
you can create the default record. 


Examples 


1. The following command creates a default record for a category of user that 
requires a special captive account: 


UAF> ADD DEFAULT2/LGICMD=ALT COM PROC/FLAGS=CAPTIVE - 
_UAF> /DEVICE=USER3: /DIRECTORY=[PRODUCT ] 


The command in this example uses the system-supplied default record 
DEFAULT to create the record DEFAULT2 and changes the LGICMD, 
login flags, default device, and default directory fields. The AUTHORIZE 
command COPY can then be used to create additional records having the 
same attributes as DEFAULT2. 


The COPY command creates a new UAF record that uses the specified default 
record except where you explicitly override field values. 


2. You could use the following command to create for a new user a record that 
duplicates the default record DEFAULT2: 


UAF> COPY DEFAULT2 PALOOKA/PASSWORD=W7YA84MI/UIC=[ 360,114] 


This example uses DEFAULT2 as a template to create a duplicate record for 
the user PALOOKA. Notice that the only values that are changed are those 
for password and UIC. 


6.10 Deleting a User Account 
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The main problem in deleting an account, especially an interactive or restricted 
account, is deleting the files used by the account. 


How to Perform This Task 

The following steps are suggested: 

1. Copy (or have the outgoing user of the account copy) any files of value to the 
ownership of another account. Be sure to change the owner UIC of the files to 


match the owner UIC of the new owner. You can also use the Backup utility 
(BACKUP) to save the files to a backup tape or disk. 
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2. Change the password and log in as a user of that account. This is to 
avoid inadvertently deleting files that may point to other files of different 
ownership. If you are working from a nonprivileged account, it eliminates 
this potential consequence. 


3. Delete the account’s files and directories from the deepest level up to the top 
level, using the following procedure: . 


a. Locate and examine all subdirectories using the DCL command 
DIRECTORY /default ... ], where default is the name of the account’s 
default directory. 


b. Delete the files in each subdirectory, and then delete the subdirectory. 
Note that directory files are protected against owner deletion; therefore, 
you must change the protection before deleting directory files. 


c. Delete the account’s top-level directory. Example 6-3 illustrates a 
command procedure that deletes an account’s files from the bottom level 
up. 


Note 


Do not execute the command procedure in Example 6-3 from a privileged 
account. , 


4. Remove the account, using the Authorize utility. (When you run AUTHORIZE 
to remove a user’s UAF record, AUTHORIZE also removes the user’s 
connections as a holder of identifiers in the rights database. However, if a 
departed user is the only remaining holder of a given identifier, remove that 
identifier to avoid future confusion. See the Security Guide.) 


5. Remove the user’s disk quota entry from the disk quota file, if one existed, 
with SYSMAN. 


6. Remove associated mail information by entering the MAIL command 
REMOVE username. (See the OpenVMS User’s Manual for more 
information.) 


Example 6-3 is a command procedure that deletes an account’s files. 
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Example 6-3 Command Procedure Template for Deleting an Account’s Files 
DELTREE.COM - deletes a complete directory tree 
Pl = pathname of root of tree to delete 


All files and directories in the tree, including 


! 
! 
! 
! 
| 
! the named root, are deleted. 
| 


MNNNMNM”M 


IF "''DELTREE’" .EQS. "" THEN DELTREE = "@SYSSLIBRARY ;:DELTREE" 

$ ON CONTROL _Y THEN GOTO DONE 

$ ON WARNING THEN GOTO DONE 

$ DEFAULT = FSLOGICAL("SYS$DISK") + FSDIRECTORY{() 

$10: 

$ IF Pl .NES. "" THEN GOTO 20 

$ INQUIRE Pi "Root" 

$ GOTO 10 

$20: 

$ IF FSPARSE(P1) .EQS. "" THEN OPEN FILE ‘Pl’ 

$ SET DEFAULT ‘Pil’ 

SLOOP: 

$ FILESPEC = FSSEARCH("*.DIR;1") 

$ IF FILESPEC .EQS. "" THEN GOTO LOOPEND 

$ DELTREE [.’FSPARSE(FILESPEC,,,"NAME")’ ] 

$ GOTO LOOP 

SLOOPEND: 

$ IF FSSEARCH("*.*;*") ~NES. "" THEN DELETE *.¥*;* 

$ DIR = (F$DIRECTORY()-"]"-">")-FSPARSE("[-]",,,- 
"DIRECTORY" )=-"J"=">" yan nanpuan<" 

$ SET PROTECTION=WORLD:RWED [-]'DIR’ .DIR;1 

$ DELETE [-]'DIR’.DIR;1 

SDONE: 

$ SET DEFAULT 'DEFAULT’ 


6.10.1 Using BACKUP to Remove User Files 


If each user has a unique UIC, you can use the Backup utility to remove the 
user’s files, even if the files are scattered throughout the directory structure. 
See the Backup utility section in the OpenVMS System Management Utilities 
Reference Manual: A-L for more information. 


Examples 
1. The following is an example of a BACKUP command used to remove files: 
$ BACKUP/DELETE PUBLIC:[...]/BY_OWNER=[21,103] MTAQ:PUBLICUIC.SAV 


This BACKUP command copies and deletes only those files owned by the 
specified UIC on disk PUBLIC. The files are copied into a save set named 
PUBLICUIC.SAV on device MTAO. Note that the BACKUP/DELETE 
command does not delete the directory files (file type .DIR) for the account. 


2. To recover lost files, enter the ANALYZE/DISK_STRUCTURE command in 
the following format: 


ANALYZE/DISK_STRUCTURE/REPAIR/CONFIRM device-name: 


See Section 8.12.3 for a complete description of how to recover lost files. See 
the OpenVMS System Management Utilities Reference Manual for information 
on using the Analyze/Disk_Structure utility. 
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6.11 Disabling a User Account 


If you want to disable an account without deleting it, set the disable user flag 
(/FLAGS=DISUSER) using AUTHORIZE. If the user is logged in, the account is 
disabled only after the user logs out. 


6.12 Understanding Restricted Use Accounts 


Workload schedules often dictate the days and times your system is used to 
perform specific operations. Depending on the nature of the work performed 
at your site, you may want to control when certain users are allowed to log in. 
Using the Authorize utility, you can place controls in the login characteristics 
fields of the UAF record to restrict the days and times a user can log in and 
to inhibit certain login functions. This section describes how to perform the 
following tasks: 


e Setting day types 

e Restricting logins to specific times 

° Restricting login functions 

e Using login command procedures for restricted accounts 
e Setting priorities for user processes | 


For a detailed description of the qualifiers used to restrict the use of accounts, 
see the Authorize utility section in the OpenVMS System Management Utilities 
Reference Manual. 


6.12.1 Setting Day Types 


You can restrict the use of certain accounts by defining the days of the week 
as either PRIMARY or SECONDARY, and then assigning login restrictions to 
these day types. For example, if you define the days Saturday and Sunday as 
SECONDARY days, then any restrictions you assign to the SECONDARY day 
type apply to both. 


You can assign two types of login restrictions to either day type: 


Restriction Description 
Time restrictions Limits logins to specific hours of the day 
Function restrictions Limit types of login 


The default user record defines the five weekdays (Monday through Friday) 
as PRIMARY days, and the two weekend days (Saturday and Sunday) as 
SECONDARY days. 


The way you define days and assign restrictions depends on your site. For 
example, suppose that on weekdays your system supports a large number of 
interactive users, but on weekends it is used for certain operations that require 
dedicated system resources. By assigning restrictions to the SECONDARY day 
type, you can restrict users from accessing the system during the days defined as 
SECONDARY. You can change these day type definitions for any account using 
the following AUTHORIZE qualifier: 


/PRIMEDAYS=([NO]day[,...]) 
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The /PRIMEDAYS qualifier uses a list of day names to define the PRIMARY and 
SECONDARY days of the week. To define a day as a SECONDARY day, use 
the prefix NO before the day name. Any days you omit from the list take their 


default value. 


6.12.2 Restricting Logins to Specific Times 


By default, there are no restrictions on login hours. You can specify login time 
restrictions using the following AUTHORIZE qualifiers: 


Qualifier 


/[NO]JACCESS 
/[NOJDIALUP 


/[NOJINTERACTIVE 
/[NOJLOCAL 


/[NOJREMOTE 


Meaning 


Specifies access hours for all modes of logins 


Specifies access hours for interactive logins from dialup 
terminals 


Specifies access hours for interactive logins from any terminal 


Specifies access hours for interactive logins from local 
terminals 


Specifies access hours for interactive logins from network 
remote terminals (SET HOST) 


Users still logged in when the access time has expired receive the following 
warning message and have 2 minutes to log out before their process is terminated 


by the job controller: 


JBC-W-RESTRICT, UAF restricts access at this time, please log out immediately 


6.12.3 Restricting Login Functions 


In addition to specifying hourly login restrictions, you can assign function 
restrictions to an account by using appropriate keywords with the /FLAGS 
qualifier in the Authorize utility. By default, there are no restrictions. Options 
are shown in the following table: 
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Keyword 


[NOJAUDIT 
[NOJAUTOLOGIN 


[NO]JCAPTIVE 


[NO]DEFCLI 


[NO]DISCTLY 


[NO]DISFORCE_PWD_ 
CHANGE 


[NOJDISIMAGE 


[NO]DISMAIL 
[NOJDISNEWMAIL 
[NOJDISPWDDIC 


Meaning 


[Do not] audit all security-relevant actions. 


[Do not] prevent access except by automatic login when 
automatic logins are enabled. 


[Do not] prevent user from changing any defaults at login 
(implies DISCTLY). 


[Do not] deny user access to the DCL command level. 


[Do not] prevent user from changing default CLI or CLI 
tables. 


[Do not] disable Ctrl/Y interrupts. 


[Do not] remove requirement that user must change an 
expired password at login. 


[Do not] prevent user from using the RUN or MCR commands 
or from executing “foreign” commands. 


[Do not] prevent mail delivery to the user. 
{Do not] suppress “New Mail ... ” announcements. 


[Do not] disable automatic screening of new passwords 
against a system dictionary. 
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Keyword Meaning 

[NOJDISPWDHIS [Do not] disable automatic checking of new passwords against 
list of user’s old passwords. 

[NOJDISREPORT [Do not] disable reporting of login information (last login 

date, login failures, and so on). 

[NO]DISUSER [Do not] disable account completely. 

[NO]DISWELCOME [Do not] suppress “Welcome to ... ” login message. 

[NO]IGENPWD [Do not] require user to use generated passwords. 

[NOJLOCKPWD [Do not] prevent user from changing password. 

[NOJPWD_EXPIRED [Do not] mark password as expired. 

[NO]PWD2_EXPIRED [Do not] mark second password as expired. 

[NOJRESTRICTED [Do not] prevent user from changing any defaults at login. 


6.12.4 Using Login Command Procedures for Restricted or Captive Accounts 


Using the /LGICMD qualifier with the AUTHORIZE commands ADD, MODIFY, 
or COPY defines the login procedure for a restricted or captive account. A person 
logging in to such an account cannot modify the procedure with any of the login 
qualifiers: /CLI, /DISK, /COMMAND, /NOCOMMAND, /TABLES. The CAPTIVE 
and RESTRICTED flags disable the use of Ctrl/Y (FLAG=DISCTLY), although 

a system manager can enable the Ctrl/Y sequence for a restricted account by 
adding the DCL command SET CONTROL=Y at the end of the login procedure. 
The CAPTIVE and RESTRICTED flags also prevent the use of the SPAWN 
command from MAIL or the use of the SPAWN built-in procedure from the DEC 
Text Processing utility (DECTPU). 


Once logged in, a person using a restricted account operates from the DCL level 
and can access any available software. 


A person using a captive account is locked into the application software where 
access to the DCL level is denied, provided the system manager observes the 
following practices: 


¢ When user input is required (and it is best to avoid it), never execute the 
input directly, but rather compare it to what is expected and screen for illegal 
characters, such as the ampersand ( & ), apostrophe (’ ), at sign ( @ ), dollar 
sign ( $ ), hyphen ( - ), and quotation mark (" ). 


e Use the DCL command READ/PROMPT in captive account login command 
procedures because the INQUIRE command is not allowed. 


¢ Set the subprocess limit to 0 to prevent the user from spawning out of 
the account. Set both the /PRCLM qualifier and the SYSGEN parameter 
PQL_MPRCLM. 


Example 


A simple login command procedure for a captive account used for an inventory 
system might consist of the following commands: 


$ DEFINE SYSSDISK DISKSINVENT 
$ RUN INVENTORY 
$ LOGOUT 


6-27 


Managing User Accounts 
6.12 Understanding Restricted Use Accounts 


6-28 


The application program INVENTORY assumes control when the user logs in 

to the account. You should assign the CAPTIVE flag to the login flags field 

of the captive account UAF record by specifying the AUTHORIZE qualifier 
/FLAGS=CAPTIVE. Section 6.9.1 shows how to use AUTHORIZE to create a UAF 
record for a captive account. 


Example 6—4 shows a command procedure for a highly secure captive account, 
which restricts the user to a very limited set of commands. System managers 
must be sure to deny the account owner any write access to the login command 
procedure and its directory. Note also that the security manager would use the 
AUTHORIZE qualifier /NOINTERACTIVE when establishing this account. 


For more information about captive and restricted accounts, see the Security 
Guide. 


Example 6-4 Sample Captive Command Procedure 


$ deassign sys$input 

$ previous sysinput == f$logical("SYS$INPUT") 
$ on error then goto next_command 

$ on control y then goto next_command 

$ set control=(y,t) 

$ 


Snext_command: 
$ on error then goto next_command 
$ on control y then goto next_command 


$ if previous sysinput .nes. f$logical("SYSSINPUT") then deassign sys$input 
$ read/end=next_command/prompt="$ " sys$command command 

$ command == f$edit(command, "UPCASE, TRIM, COMPRESS" ) 

$ if f$length(command) .eq. 0 then goto next_command 


$ 

$ delete = "delete" 

$ delete/symbol/local/all 

$ if f$locate("@",command) .ne. f$length(command) then goto illegal command 
$ if f$locate("=",command) .ne. f$length(command) then goto illegal command 
$ if f$locate("F$",command) .ne. f$length(command) then goto illegal command 
$ verb = f$element(0," ",command) 

$ 

$ if verb .eqs. "LOGOUT" then goto do logout 

$ if verb .eqs. "HELP" then goto do help 


$ 
$ write sysSoutput "SCAPTIVE-W-IVVERB, unrecognized command \",verb,"\" 
$ goto next_command 


$illegal_command: 
$ write sys$output "SCAPTIVE-W-ILLEGAL, bad characters in command line" 
$ goto next_command 


$do_logout: 
$ logout 
$ goto next_command 


$do_help: 

$ define sys$input sys$command 
$ help 

$ goto next_command 
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6.12.5 Setting Priorities for User Process 


A user’s priority is the base priority used in scheduling the process that the 
system creates for the user. There are 32 levels of software priority in the 
operating system, 0 through 31. The highest priority is 31; the lowest is 0. 
The range of priorities for timesharing processes is 0 through 15; the range for 
real-time processes is 16 through 31. 


Processes with real-time priorities are scheduled strictly according to base 
priority; in other words, the executable real-time process with the highest base 
priority is executed first. Processes with timesharing priorities are scheduled 
according to a slightly different principle to promote overlapping of computation 
and J/O activities. 


In the user’s account record of the UAF, the default value of a user’s priority 
is 4; for practical purposes, the minimum value is 0. You should ensure that 
the priority for timesharing users remains at the default. Note that if you give 
some users an advantage over other users by raising their priorities, ragged 
performance will result, because the system reacts sharply to even small base 
priority differences. 


6.13 Setting Up Special Accounts 
This section explains how to perform the following tasks: 
e Setting up an automatic login account with SYSMAN 
e Setting up a project account with ACL identifiers 
e Setting up a network proxy account 
¢ Creating a network proxy authorization file 
e Adding proxy accounts 


¢ Controlling proxy logins 


6.13.1 Setting Up an Automatic Login Account with SYSMAN 


The System Management utility (SYSMAN) includes the functions of the auto- 
login facility (ALF). Using SYSMAN ALF commands, you set up a terminal that 
accepts automatic logins only from certain users. For example, a terminal might 
be set up for the account INVENTORY, which automatically logs a user into a 
captive account when the user specifies INVENTORY as the user name. 


First, you must follow the steps described in the previous sections to create 
the top-level default directory and add the account. Then you can associate the 
account with a particular terminal or port using the following format: 


ALF ADD device username [/TERMINAL] [/PORT] [/PROXY] [/LOG] 


where: 

device is the terminal or port name that you want to assign to a user name. 
Note that device must be a terminal name if you do not specify 
qualifiers on the command line. 

username is the account user name that you want to assign to a particular 
terminal or port. 

/TERMINAL causes SYSMAN to treat device as a terminal name. This is the default 
behavior. 
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/PORT causes SYSMAN to treat device as a port name. If the port name 
contains a special character such as a slash (/ ) or if it contains 
lowercase letters that you want to preserve, you must enclose the port 
name within quotes. 


/PROXY causes SYSMAN to treat device as a port name. SYSMAN also checks 
that device is in the NODE::USERNAME format. 
/LOG causes SYSMAN to echo the device name and the user name is added 


to the ALF database. 


Example 


The following example shows how to invoke SYSMAN and assign terminal TTAO 
to the INVENTORY account: 


$ RUN SYSSSYSTEM:SYSMAN 
SYSMAN> ALF ADD TTAO INVENTORY 


For more information about autologin accounts and the SYSMAN ALF commands, 
see the OpenVMS System Management Utilities Reference Manual and the 
Security Guide. 


6.13.2 Setting Up a Project Account with ACL Identifiers 
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This section describes how to set up a project account that uses access control 
lists (ACLs) to control access to files shared by members of a project group. See 
the Security Guide for complete details on setting up accounts with ACLs. 


How to Perform This Task 


You must first add an identifier to the rights database for the project account. 
You use the AUTHORIZE command ADD/IDENTIFIER to add identifiers to the 
rights database and then associate users as holders of existing ACL identifiers 
with the AUTHORIZE command GRANT/IDENTIFIER. All users who hold the 
project’s identifier can use the disk space of the project account. 


You can set up the project account so that disk space is charged to the project, 
rather than to individual users, by assigning the Resource attribute to the project 
identifier. 


Example 
The following example summarizes the steps for setting up a project account: 


1. Set up individual user accounts for each member sharing the project account 
(as described in Section 6.3 and Section 6.5 on adding a user account). 


2. Create the project identifier with the Resource attribute and grant it to 
those users who will have access to the project account. In the example that 
follows, the project identifier KITE_FLYING is given the Resource attribute. 
This identifier is then granted to users GEORGE and LINDORF. 


$ RUN SYSSSYSTEM: AUTHORIZE 

UAF> ADD/IDENTIFIER KITE _FLYING/ATTRIBUTES=RESOURCE 

{message} 

UAF> GRANT/IDENTIFIER KITE FLYING GEORGE/ATTRIBUTES=RESOURCE 
{message} 

UAF> GRANT/IDENTIFIER KITE FLYING LINDORF/ATTRIBUTES=RESOURCE 
{message} 

UAF> EXIT 
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3. Create the disk quota authorization for the project identifier. For example, 
the following command invokes SYSMAN and assigns the identifier KITE_ 
FLYING 2000 blocks of disk quota with 200 blocks of overdraft: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> DISKQUOTA ADD KITE FLYING/PERMQUOTA=2000/OVERDRAFT=200 
SYSMAN> EXIT 


4. Create the project directory. For example, the following DCL command 
creates the project directory [KITE_FLYING] and establishes the identifier 
KITE_FLYING as the owner: 


$ CREATE/DIRECTORY [KITE _FLYING]/OWNER=[KITE FLYING] 


5. Set up the necessary ACL and default ACL on the project directory. For 
example, the following DCL command places an ACL on the directory [KITE_ 
FLYING] that permits any holder of the identifier KITE_FLYING to gain 
read, write, or execute access to the directory. It also ensures that files 
created in the directory receive the same ACE (access control list entry) as a 
default. 


On VAX systems, the following example applies: 


$ SET SECURITY [000000]KITE FLYING.DIR;1 - 

$ /ACL=((DEFAULT PROTECTION, S:RWED,O:RWED,G,W) - 

$ (IDENTIFIER=KITE FLYING, ACCESS=READ+WRITE+EXECUTE), - 

$ (IDENTIFIER=KITE FLYING, OPTIONS=DEFAULT,ACCESS=READ+WRITE+EXECUTE)) @ 


On AXP systems, the following example applies: 


$ SET ACL [000000]KITE FLYING.DIR;1 - 

_$ /ACL=((DEFAULT PROTECTION,S:RWED,O:RWED,G,W) - 

~$ /ACL=(IDENTIFIER=KITE FLYING, ACCESS=READ+WRITE+EXECUTE), - 
~$(IDENTIFIER=KITE FLYING, OPTIONS=DEFAULT , ACCESS=READ+WRITE+EXECUTE)) @ 


Access must be granted through ACL entries, because the owner identifier of 
the directory and the files (KITE_FLYING) does not match the UIC of any of 
the project members; thus, only world access is available through the UIC-based 
protection mask. The first ACE of the specified ACL gives all project members 
read, write, and execute access to the directory; the second ACE gives them read, 
write, and execute access for all files created in the directory. 


Note that project members are not allowed to delete (or control) files created by 
others. However, the members each have complete access to files that they have 
created in the directory, because the file system supplies an additional default 
ACL entry that grants to the creator control access plus the access specified in 
the OWNER field of the UIC-based protection mask. This ACE appears only 
when the owner of the created file does not match the UIC of the creator. 


Thus, when LINDORKF creates the file [KITE_FLYING]THURSDAY.TXT, it 
receives the following access control list by default: 


( IDENTIFIER=LINDORF , OPTIONS=NOPROPAGATE, 
ACCESS=READ+WRITE+EXECUTE+CONTROL ) 
(IDENTIFIER=KITE FLYING, ACCESS=READt+WRITE+EXECUTE) 
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P VAX J On VAX systems, you can use the Creator ACE command in the ACL editor to 
add an extra ACE to the ACL for a file created within the directory to which 
you assign the Creator ACE. The Creator ACE applies only when the following 
conditions exist: 


e The file being created is not owned by the user identification code (UIC) of the 
process creating the file. 


¢ The process creating the file does not have system privileges. 


See the OpenVMS System Management Utilities Reference Manual and the 
OpenVMS VAX Guide to System Security for more information about the Creator 
ACE. ¢ 


6.13.3 Understanding Network Proxy Accounts 


A network proxy account allows users on a remote node in a network to access 
data by way of a local account on your system. Proxy accounts are useful when 
you want to grant one or more users on a remote node access to specific files, 
but you do not want to give them a private account on your system. Very often, 
system managers set up proxy accounts as restricted. You establish and control 
proxy accounts with the Authorize utility. 


With proxy accounts, you can authorize one or more users on a remote node to 
enter DCL commands that access data from a particular account on your system. 
Proxy accounts allow remote users to access specific local data (for example, type 
and print files) without having to log in to your system or use an access control 
string. Remote users assume the same file access rights as the local account and 
also receive the default privileges of the local account. The following sections 
explain the procedures for setting up proxy accounts. 


For more information about proxy accounts, see the Security Guide. 


6.13.4 Creating a Network Proxy Authorization File 


A proxy account permits an authorized user from a remote node to log in 

to a local node, as if the user owned an account on the local node. Proxy 
accounts are created and maintained using the Authorize utility. You use the 
AUTHORIZE command CREATE/PROXY to create and initialize the network 
proxy authorization file (SYS$SYSTEM:NETPROXY.DAT). 


Proxy accounts must be associated with user accounts in the SYSUAF.DAT file on 
your local system. You will probably want to create a “standard access” account 
in the UAF for proxy accounts. For example, you could create an account named 
REMOTE_MKT with limited privileges, which allows access to certain data files 
on your local system. 


Suppose you have a group of users on your local system who prepare marketing 
reports and who rely on input from users on other systems. You would assign 
the REMOTE_MKT account in SYSUAF.DAT the same group number and 
default privileges you assign to the local marketing group. In this way, the 
remote contributors could access any data files that are “owned” by users in your 
marketing group and that are not protected from group access. 


6.13.5 Adding Proxy Accounts 


You create a proxy account by adding entries to the network proxy authorization 
file; these entries equate one or more users on a remote node to users on your 
home node. 
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How to Perform This Task 
The command syntax for adding a proxy account is as follows: 


ADD/PROXY node::remote-user local-user/DEFAULT |....] 


You can allow remote users access to up to 16 total local accounts: 1 default proxy 
account and 15 alternate proxy accounts. Use the /DEFAULT qualifier to specify 
the default proxy account. 


Example 
The following command adds a user proxy account: 


UAF> ADD/PROXY HAL::WALTER REMOTE MKT/DEFAULT, PROXY2 , PROXY3 


Assume that you have created three accounts named REMOTE_MKT, PROXY2, 
and PROXY3 on your home node. The entry in this example permits the user 
WALTER on remote node HAL to access data by way of the REMOTE_MKT 
account on your home node. WALTER can access any data from his node that 
REMOTE_MKT can access locally. To access data through either PROXY2 or 
PROXY3, WALTER must specify the desired proxy account in the access control 
string of the DCL command used to perform network file operations. 


___ Caution 


Because the remote user receives the same privileges as the local user, do 
not set up proxy accounts associated with local accounts that have special 
privilege. Granting remote users such access powers poses a threat to the 
security of your system. 


Remote users can be specified by user name or, for remote systems that do not 
recognize the user name syntax, by UIC. The following example allows the user 
associated with the UIC [360,54] on remote node RSTS32 proxy access to the 
GENERIC account on the local node: 


UAF> ADD/PROXY RSTS32::[360,54] GENERIC/DEFAULT 


A number of your users may have accounts on a remote node and require ready 
access to their local files. You can create a network proxy authorization file record 
that grants access to each of them, provided the user name on your system is 
the same as the user name on the remote node. The following form of the ADD 
/PROXY command adds such a record: 


UAF> ADD/PROXY HAL::* */DEFAULT 


This command authorizes any user on the remote node HAL to access any account 
with the same user name on your system. 


Similarly, you might want to permit this sort of access for just one user: 


UAF> ADD/PROXY HAL::BARBARA */DEFAULT 


6.13.6 Controlling Proxy Logins 


Whenever a proxy login request occurs, the system verifies that proxy access on 
the participating nodes is enabled. (By default, both incoming and outgoing proxy 
access is enabled for each node.) If access is enabled, the system checks account 
information in your NETPROXY.DAT file. You can, however, change proxy access 
or disable it totally by using the Network Control Program (NCP). Use of NCP 

to control proxy access is described in the DECnet for OpenVMS Networking 
Manual. 
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6.14 Managing MAIL Accounts 


When managing user accounts, you might have to manage a user’s mail account. 
For example, you might want to perform the following tasks: 


e Change a user’s MAIL profile; for example, to change a user name or specify 
a default print queue for the account 


¢ Set a forwarding address for a user who has moved to another location 


¢ Disable a user’s account from receiving mail 


6.14.1 Modifying a User Record 


All users can modify and display information about their own records using 
various SET and SHOW commands available within MAIL. These commands 
access SYS$SYSTEM:VMSMAIL_PROFILE.DATA, which is a single-key indexed 
sequential file containing information for each user. 


With SYSPRV, you can modify the records of other users. Table 6—7 lists the 
fields in the user profile record and the MAIL command you can use to modify 


those fields. 


Table 6-7 MAIL User Profile Record 


Field 


Username 

Forwarding address 
Personal name 

Editor name 

Copy SEND/REPLY flags 
Autopurge flag 

Mail file subdirectory name 
New mail count 

Default queue 

Default form 

Carbon copy enabled 


Command 


SET FORWARD 

SET PERSONAL_NAME 
SET EDITOR 

SET COPY_SELF 

SET AUTO_PURGE 
SET MAIL_DIRECTORY 
READ/NEW 

SET QUEUE 

SET FORM 

SET CC_PROMPT 


You can arrange mail forwarding for users without accounts on the system by 
using the command SET FORWARD/USER<=user. 


6.14.2 Removing a User Record 


Typically, once you have deleted a user’s record in the UAF, you will also want to 
remove their user information from the user profile database. You can remove a 
record from the user profile database with the REMOVE command. 


6.14.3 AUTHORIZE Flags and MAIL 


Certain flags set in a user’s UAF record can affect the user’s MAIL environment. 
You can set the appropriate flags in a user account by specifying the following 
flags with the /FLAGS qualifiers using AUTHORIZE: 
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Flag Meaning 

[NO]JDISNEWMAIL Enables or disables the display of the new mail count when the 
user logs in to the system. 

[NO]DISMAIL Allows or restricts the receipt of new mail. 


6.14.4 Using the MAIL$SSYSTEM_FLAGS Logical Name 


You can define the logical name MAIL$SYSTEM_FLAGS as a system and 
executive mode logical name as shown in the following example: 


$ DEFINE/SYSTEM/EXECUTIVE MODE MAILSSYSTEM FLAGS 1 


The value of the logical name MAIL$SYSTEM_FLAGS is interpreted in the 
following ways: 


Value Meaning 
1 Indicates that this node is part of a homogeneous VMScluster. In other words, 


all disks are accessible to the VMScluster and there is a common SYSUAF 
file and a common VMSMAIL file for the VMScluster. When this bit is set, 
the node to which you are sending mail is checked to see if it is currently in 
the VMScluster. If the node is in the VMScluster, the node is bypassed using 
DECnet and the message is written directly to the recipient’s mail file. (Note 
that the node must be up to determine whether it is part of the VMScluster.) 


2 Directs MAIL to set the VMScluster breakthrough flag when issuing the 
$BRKTHRU service to notify the recipient of new mail. This flag is used only 
in VMScluster systems and, typically, only in homogeneous VMSclusters (in 
other words, flag 1 is also set). 


4 Directs MAIL to include the time the message was delivered in the 
notification message displayed on the recipient’s terminal. 


Note that, if MAIL$SYSTEM_FLAGS is translated to 7, all three flags are 
selected. If the logical name does not translate, the default is 0. 


If the number of new (unread) mail messages displayed on the user’s screen is 
inconsistent with the actual number of new messages, enter the READ/NEW 
command once (for each nonexistent message) when there is no new mail. 


In mail messages sent through DECnet, users can specify node names and user 
names as logical names. They are translated like OpenVMS RMS specifications; | 
that is, a node name or user name is translated only if it is the first string in the 
specification. Any access control information in the node name or logical name is 
ignored. 


6.15 Understanding System Resources 


This section contains detailed descriptions of the resource control attributes you 
can assign to a user process when creating a record in the UAF. 


6.15.1 Understanding Pagelets 


VAX and AXP systems allocate and deallocate memory for processes in units 
called pages. A page on a VAX system is 512 bytes. On AXP systems, the page 
size will be one of four values: 8 kilobytes (KB) (8192 bytes), 16KB, 32KB, or 
64KB. A particular AXP system will implement only one of the four page sizes 
and the initial set of machines use an 8 kilobyte page. 
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In most cases, AXP systems present to users, and accept from users, units of 
memory in a 512-byte quantity called a pagelet. Thus, one pagelet is the same 
size as one VAX page. Also, on an AXP 8KB computer, 16 pagelets equal 1 AXP 
page. The following conversion table shows the relationship between pages, 
pagelets, and bytes: 


One AXP pagelet = one VAX page = 512 bytes 

One AXP page = 16 AXP pagelets = 16 VAX pages = 8192 bytes 

Authorize utility commands, parameters, and default values are identical. 
However, the default values for process quotas related to memory use may be 
inappropriate for some AXP system users. 


See A Comparison of System Management on OpenVMS AXP and OpenVMS VAX 
for more information about AXP system management. 


6.15.2 Setting Limits on System Resources, 


6-36 


Each user of the system is limited in the consumption of such resources as system 
memory, volatile (pagefile) disk space, number of processes, I/O requests, and so 
forth. You set limits when you create an account for the user with the Authorize 
utility. | 


Limits control the way in which a process shares its allotment of a resource with 
the subprocesses it creates. In addition to restricting the number of processes 
that a single user or account has at any given time, the system uses four types 
of limits for sharing resources. Table 6-8 lists and describes these four types of 
limits. 


Table 6-8 Types of Limits 
Limit Type Description 


Pooled If the limit on the use of a resource is pooled, a process and 
created subprocesses share the total limit on a first-come, 
first-served basis. 


Deductible If the limit on the use of a resource is deductible, a subprocess 
is allotted a portion of the total limit; the portion given to the 
subprocess is deducted from the total limit. 


Nondeductible If the limit is nondeductible, the subprocess is allotted the total 
limit of the creating process; there is no deduction from the 
allotment of the creating process. 


Systemwide If the limit is systemwide, a process and all created subprocesses 
with the same user name or account share the total limit on a 
first-come, first-served basis. 


When you create an account, you assign values to the limits shown in Table 6-9. 
These limits are described in the following sections. Usually, you simply assign 
the default values for these limits. However, see the Guide to VMS Performance 
Management for a discussion of how to evaluate and adjust the limits in the 
context of performance optimization strategies. See also A Comparison of System 
Management on OpenVMS AXP and OpenVMS VAX for more information about 
the differences between VAX and AXP systems. 


Table 6—9 summarizes each of these limits, the value supplied in the UAF record 
for the SYSTEM and DEFAULT accounts, and the type of limit. 
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Note 


On AXP systems, the default values for several of the process quotas 
have been increased. Table 6-9 also lists the values supplied in the UAF 
record for the DEFAULT account on an AXP system. See A Comparison 
of System Management on OpenVMS AXP and OpenVMS VAX for more 
information about AXP process quotas. ¢ 


Table 6-9 Limits and Suggested Values for SYSTEM and DEFAULT Accounts 


VAX 
SYSTEM 
Limit Value 
ASTLM 50 
BIOLM 40 
BYTLM 32768 
CPUTIME 0 
DIOLM 40 
ENQLM 300 
FILLM 300 
JTQUOTA 4096 
MAXACCTJOBS 0 
MAXDETACH 0 
MAXJOBS 0 
PGFLQUOTA 20480 pages 
PRCLM 10 
TQELM 30 
WSDEFAULT 256 pages 
WSEXTENT 40960 pages 
WSQUOTA 512 pages 


VAX 
DEFAULT 
Value 


40 
40 
32768 


40 
200 
300 

4096 


32768 pages 


2 
40 
256 pages 


1024 pages 


512 pages 


AXP 
DEFAULT 
Value Type’ Description 
250 N AST queue limit 
150 N Buffered I/O count limit 
64000 P I/O byte count limit 
0 D CPU time limit (0 = no limit) 
150 N Direct I/O count limit 
2000 P Enqueue quota 
20 P Open file limit 
4096 Pp Initial byte quota for jobwide 
logical name table 

0 S Maximum active processes 
for a single account (0 = no 
limit) 

0 S Maximum detached 
processes for a single user 
name (0 = no limit) 

0 S Maximum active processes 
for a single user name (0 = 
no limit) 

50000 P Paging file limit 
‘ pagelets 
8 Pr Subprocess creation limit 
10 |e Timer queue entry limit 
2000 N Default working set size 
pagelets 
16384 N Working set extent 
pagelets 
4000 N Working set quota 
pagelets 


1D=deductible, N=nondeductible, P=pooled, S=systemwide 


AST Queue Limit (ASTLM) 
The AST queue limit (ASTLM) limits the sum of the following: 


e The number of asynchronous system trap (AST) requests that a user’s process 
can have outstanding at one time 
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e The number of scheduled wakeup requests that a user’s process can have 
outstanding at one time 


This limit affects all system services that accept an AST address as an argument, 
and the Schedule Wakeup ($SCHDWK) system service. 


If the deferred write option (DFW) is enabled, the number of ASTs used per file 
is equal to 1, plus the number of record streams, plus the multibuffer count. 
Otherwise, the number is 1 plus the number of record streams. 


Buffered I/O Count Limit (BIOLM) 


The buffered I/O count limit (BIOLM) limits the number of outstanding buffered 
I/O operations permitted for a user’s process. 


In a buffered I/O operation, the data transfer takes place from an intermediate 
buffer in the system pool, not from a process-specified buffer. Buffered operations 
for a user process include terminal I/O, file system and network I/O, card reader 
input, and unspooled printer output. During a buffered I/O operation, the pages 
containing the process-specified buffer need not be locked in memory. 


Buffered I/O Byte Count Limit (BYTLM) 


The buffered I/O byte count limit (BYTLM) limits the amount of buffer space that 
a user’s process can use. 


This buffer space is used for buffered I/O operations and for the creation of 
temporary mailboxes. It also limits the number of mapping windows the user can 
create as segmented (or cathedral) windows. Cathedral windows are primarily 
useful for reducing the overhead required to read large files. 


CPU Time Limit (CPUTIME) 


The CPU time limit (CPUTIME) limits the amount of CPU time that a user’s 
process can use per session. 


The time must be specified in abbreviated delta format— hh:mm:ss.cc. 


CPUTIME is a deductible limit with a suggested typical value of 0 (no limit), 
but the value applies only to this instance or to other instances of the user’s 
processes. CPUTIME is not cumulative across separate sessions or batch jobs. 


Direct I/O Count Limit (DIOLM) 


The direct I/O count limit (DIOLM) limits the number of outstanding direct I/O 
operations permitted to a user’s process. 


In a direct I/O operation, the data transfer takes place directly from a process- 
specified buffer. Direct I/O operations for a user process typically include disk and 
tape I/O. The pages containing this buffer are locked in memory by the operating 
system during the direct I/O operation. 


DIOLM is a nondeductible limit. 


Enqueue Quota (ENQLM) 


The enqueue quota (ENQLM) limits the number of locks a process (and its 
subprocesses) can own. OpenVMS Record Management Services (RMS) uses the 
Lock Management facility to synchronize shared file access, global buffers, and 
record locks. Because RMS takes out one lock for every shared file, local buffer, 
global buffer section, and outstanding record lock, users who expect to perform 
large amounts of RMS file sharing should have ENQLM set to a large value. 
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If your process performs extensive RMS file sharing without sufficient enqueue 
quota, you could receive the SS$_EXENQLM error message. Furthermore, if your 
system performs extensive RMS file sharing and the value of the LOCKIDTBL 
system parameter is too low, you could receive the SS$_NOLOCKID error 
message. Note that whenever you increase the value of LOCKIDTBL, you may 
have to increase the value of the RESHASHTBL system parameter (see the 
OpenVMS System Management Utilities Reference Manual). 


For shared files, the value of ENQLM should represent the number of files open 
as shared multiplied by the number of locks per process per file. If you use 

the default multibuffer counts, estimate the number of locks as 4 for indexed 
sequential files and 3 for relative files. If you use other than the default value 
for the multibuffer counts, estimate the number of locks per process per file as 1 
per file, plus the multibuffer count for that file, plus the number of records locked 
(which is usually one). Use the DCL command SHOW RMS_DEFAULT to display 
the default multibuffer counts. 


ENQLM is a pooled limit. 


Expiration Date and Time (EXPIRATION) 


The expiration qualifier specifies the expiration date and time of the account. The 
/NOEXPIRATION qualifier removes the expiration date on the account or resets 
the expiration time for expired ac- counts. The default expiration time period is 
90 days for nonprivileged users. 


Open File Limit (FILLM) 
The open file limit (FILLM) limits the number of files that a user’s process can 


have open at one time. This limit includes the number of network logical links 
that can be active at the same time. 


FILLM is a pooled limit. Note that each open file also requires at least 96 bytes 
of BYTLM. 

Job Table Quota (JTQUOTA) 

The job table quota (JTQUOTA) specifies the initial byte quota with which the 
jobwide logical name table is to be created. 

JTQUOTA is a pooled quota. 


Maximum Account Jobs Limit (MAXACCTJOBS) 


The maximum account jobs limit (MAXACCTJOBS) specifies the maximum 
number of batch, interactive, and detached processes that may be active at one 
time for all users of a single account. 


MAXACCTJOBS is a systemwide limit. 


Maximum Detached Processes Limit (MAXDETACH) 


The maximum detached processes limit (MAXDETACH) specifies the maximum 
number of detached processes that may be active at one time for all users of a 
single account. Processes that exceed this limit are terminated. 


MAXDETACH is a systemwide limit. 


Maximum Process Jobs Limit (MAXJOBS) 


The maximum process jobs limit (MAXJOBS) specifies the maximum number of 
interactive, batch, and detached processes that can be active at one time for the 
cited user name. Processes that exceed this limit are terminated. 


MAXJOBS is a systemwide limit. 


‘ 
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Paging File Limit (PGFLQUOTA) 

The paging file limit (PGFLQUOTA) limits the number of pages that the user’s 
process can use in the system paging file. The paging file provides temporary 
disk storage for pages forced out of memory by a memory management operation. 
PGFLQUOTA limits the total virtual address space that can be created using 
the Create Virtual Address Space (S$CRETVA) or Expand Program/Control Region 
(SEXPREG) system services. 


PGFLQUO is a pooled limit. 


Subprocess Creation Limit (PRCLM) 


The subprocess creation limit (PRCLM) limits the number of subprocesses a 
user’s process can create. 


The process created when a user logs in to the system can in turn create 
subprocesses. These subprocesses are all accountable to the user and share 
the resources allotted to the initial process. 


PRCLM is a pooled limit. 


Timer Queue Entry Limit (TQELM) 
The timer queue entry limit (TQELM) limits the sum of the following: 


e The number of entries that a user’s process can have in the timer queue 


¢ The number of temporary common event flag clusters that a user’s process 
can have 


This limit does not govern the creation of permanent event flag clusters. 


Timer queue entries are used in time-dependent scheduling; common event flags 
are used in synchronizing activities among groups of cooperating processes. 


TQELM is a pooled limit. 


Default Working Set Size (WSDEFAULT) 


The default working set size (WSDEFAULT) sets the initial working set size limit 
for a user’s process. 


WSDEFAULT is a nondeductible limit. If the value specified exceeds the value of 
WSQUOTA, the lesser value is used. 


Working Set Extent (WSEXTENT) 


The working set extent (WSEXTENT) specifies the maximum size to which a 
user’s physical memory usage can grow, independent of the system load. This 
enlargement of the physical memory for a user is accomplished by the Adjust 
Working Set Limit ($ADJWSL) system service, and is normally done for the user 
by the operating system in response to heavy page faulting by the user. 


WSEXTENT is a nondeductible quota. This value should always be greater than 
or equal to WSQUOTA. The value is controlled by the system parameter WSMAX. 


Working Set Quota (WSQUOTA) 


WSQUOTA specifies the working set quota. This is the maximum amount of 
physical memory a user process can lock into its working set. It also represents - 
the maximum amount of swap space that the system reserves for this process 
and the maximum amount of physical memory that the system allows the process 
to consume if the systemwide memory demand is significant. This parameter 
guarantees the user that the number of physical pages specified will be available. 
The minimum value is 50 pages. 
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WSQUOTA is a nondeductible quota. This value should be greater than or equal 
to WSDEFAULT. The value is controlled by the system parameter WSMAX. 
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Managing Peripheral Devices 


System managers are often responsible for setting up and managing peripheral 
devices such as terminals and printers. This chapter describes these tasks. For 
information on managing storage media such as disks and tapes, see Chapter 8. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 
Getting information about devices on the system Section 7.2 
+Setting security protection characteristics on devices Section 7.3 
Connecting devices and loading device drivers Section 7.4 
Managing terminals Section 7.5 
Managing printers Section 7.6 
Managing tape drives Section 7.7 
+Managing card readers Section 7.8 
TVAX specific 


This chapter explains the following concepts: 


Concept Section 
Device names Section 7.1 
Spooled printers Section 7.6.2 


7.1 Understanding Device Names 


On some systems, device names follow the format ddcu, where dd is the device 
code, c is the controller designation, and wu is the unit number. 


On AXP systems, all local DSA devices use a controller letter of “A,” regardless 
of the physical controller the device resides on. All local DSA disk devices 

are named DUAn, where n is a unique disk unit number. All local DSA tape 
devices are named MUAn, where n is a unique tape unit number. Use of a single 
controller letter requires that the unit number for each local DSA device be 
unique. ¢ 
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<i> 


On VAX systems, duplicate unit numbers are possible if the local disks reside on 
different controllers. ¢ 


If the system is part of a VMScluster environment, device names are formatted in 
one of the following ways: 


e Ifthe device is attached to a single computer or HSC subsystem, the device 
name includes the node name in the format node$ddcu, where node refers to 
the node name of the system that the device resides on. 


e Ifthe device is dual-ported between two computers or HSC subsystems, the 
device must be identified by a unique, path-independent name that includes 
an allocation class. The allocation class is a numeric value from 0 to 255 
that is used to create a device name in the following format: 


$allocation-class$device-name 


For example, the allocation class device name $11$DUA8: identifies a disk 
that is dual-ported between two computers or HSC subsystems that both have 
an allocation class of 11. 


For more information on the device name format in VAXcluster or VMScluster 
environments, see VMScluster Systems for OpenVMS. 


7.2 Getting Information About Devices on the System 
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Use the DCL command SHOW DEVICES to retrieve information about the 
availability of devices on your system. 


When you enter the SHOW DEVICES command without specifying a device or 
using a qualifier, the system displays information about all devices recognized by 
the system 


Note 


If a device does not appear in the display, it is not recognized by the 
system. The device may not be connected, or the driver may not be 
loaded. For certain devices, you must manually connect them and load 
their device drivers. For more information, see Section 7.4. 


If you specify a device name with the SHOW DEVICE command, the system 
displays information about that device you sepcified. If you use certain qualifiers 
with SHOW DEVICES, information is displayed about those devices that 
currently have volumes mounted or that have been allocated to processes. See 
the OpenVMS DCL Dictionary for a list of qualifiers that can be used with the 
SHOW DEVICES command. 


Example 
The following examples show various uses of the SHOW DEVICES command. 


On AXP systems, device protection is RWED (read, write, execute, delete). ¢ 
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On VAX systems, device protection is RWPL (read, write, physical, logical) instead 
of RWED (read, write, execute, delete). The SHOW DEVICES/FULL display 
includes both volume protection and device protection. In addition, if a volume 
has a protected subsystem enabled, it also appears in the display. ¢ 


1. The following command shows all devices on the system: 


$ SHOW DEVICES 


Device Device Error Volume Trans Mnt 
Name Status Count Label Blocks Count Cnt 
$11$DUA9: (SNAP) Online 0 

$11$DUA10: (SNAP) Mounted 2 PAGE 3 26 
$11SDUA13: (SNAP) Mounted 0 WORK1 36 26 
$11$DUA23: (SNAP) Online 0 

$11SDUA24: (SNAP) Mounted 0 MONITORPLUS 86 26 
DADO: (TULIP) Online 0 

DAD9: (TULIP) Online 0 

DAD44: (TULIP) Mounted wrtlck 0 CDBINO6JUL23 1 1 
ROSESMUA0: Online 0 

LAVNDRSMUAO0: Online 0 

TULIPSMUAI1: Online 0 

IRISS$MUA1: HostUnavailable 0 

OPA0: Online 0 

DBAO: Offline 0 

FTAO: Offline 0 

FTA239; Online 0 

LTAO: Offline 0 

LTA3401: Online spooled 0 

LTA3402: Online spooled 0 

RTAO: Offline 0 

RTAI: Mounted 1 

RTA2: Mounted 0 

RTBO: Offline 0 

TXA0: Online 0 

TXAL: Online 0 

XT0: Offline 0 


2. The following SHOW DEVICES command requests a full listing of the 
status of the DAD42: RRD40 device. The device is located on node IRIS © 
in a VMScluster environment. 


$ SHOW DEVICES/FULL DAD42: 


Disk DAD42: (IRIS), device type RRD40, is online, mounted, software write- 
locked, file-oriented device, shareable, error logging is enabled. 


Error count 0 Operations completed 146 
Owner process "Owner UIC [SYSTEM] 
Owner process ID 00000000 Dev Prot S:RWPL,O:RWPL,G:RWPL,W:RWPL 
Reference count 1 Default buffer size 512 
Total blocks 1218000 Sectors per track 4 
Total cylinders 50750 Tracks per cylinder 6 
Allocation class 11 

Volume label "CDBINOQ6JUL21" Relative volume number 0 
Cluster size 3 Transaction count 1 
Free blocks 15153. Maximum files allowed 152083 
Extend quantity 5 Mount count 1 
Mount status System Cache name " $11SDUA21:XQPCACHE" 
Extent cache size 64 Maximum blocks in extent cache 1515 
File ID cache size 64 Blocks currently in extent cache 0 
Quota cache size 0 Maximum buffers in FCP cache 1330 


Volume status: 


write-through caching enabled. 


subject to mount verification, file high-water marking, 
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3. The following command line requests a full informational display about each 
DU device. This display shows only the first two devices: the mounted DUA8: 
device and the unmounted DUAQ: device. 


$ SHOW DEVICES/FULL DU 


Disk $11SDUA8: (SNAP), device type RA90, is online, mounted, file-oriented 
device, shareable, served to cluster via MSCP Server, error logging is 


enabled. 

Error count 0 Operations completed 334 
Owner process "" Owner UIC [SYSTEM] 
Owner process ID 00000000 Dev Prot S:RWED,O:RWED,G:RWED,W: RWED 
Reference count 1 Default buffer size 512 
Total blocks 2376153 Sectors per track 69 
Total cylinders 2649 Tracks per cylinder 13 
Host name "SNAP" Host type, avail HS70, yes 
Alternate host name "DRAGON" Alt. type, avail HS70, yes 
Allocation class ll 

Volume label "DOCRES" Relative volume number 0 
Cluster size 3. Transaction count 1 
Free blocks 1211964 Maximum files allowed 297019 
Extend quantity 5 Mount count 26 
Mount status System Cache name "_$11$DUA21:XQPCACHE" 
Extent cache size 64 Maximum blocks in extent cache 121196 
File ID cache size 64 Blocks currently in extent cache 0 
Quota cache size 0 Maximum buffers in FCP cache 1330 


Volume status:subject to mount verification, write-through caching enabled. 

Volume is also mounted on TANGO, WHOCRS, SIRE, BARKIN, SALT, SNEEZY, ARTIC, 
HEMMING, ROCKUP, HUTZPA, HAPPY, TOSIR, CHAIN, BOXER, SPELLN, WAYLND, 
ADAM, PINE, MONA, PALMER, WLDWND, ERICA, VALLEY. 


Disk $11$DUA9: (SNAP), device type RA90, is online, file-oriented device, 
shareable, served to cluster via MSCP Server, error logging is enabled. 


Error count 0 Operations completed 544 
Owner process "Owner UIC [SYSTEM] 
Owner process ID 00000000 Dev Prot S:RWED,0O:RWED,G:RWED, W: RWED 
Reference count 0 Default buffer size 512 
Total blocks 2376153 Sectors per track 69 
Total cylinders 2649 Tracks per cylinder 13 
Host name "SNAP" Host type, avail HS70, yes 
Alternate host name "DRAGON" Alt. type, avail HS70, yes 
Allocation class 11 


7.2.1 Getting Information About ISO 9660-Formatted Devices 


You can use the SHOW DEVICE command to retrieve information about ISO 
9660-formatted devices. The following example illustrates the use of the SHOW 
DEVICE/FULL command to obtain information about an ISO 9660-formatted 
CD-ROM. Note that the ACP process name is given and that the volume status 
is listed as ISO 9660. The display tells the user that the mounted members of the 
volume set are relative volume numbers (RVN) 1, 64, and 65535. 


$ SHOW DEVICE DKA1/FULL 


Disk $1SDKAl1: (VMSRMS), device type RRD40, is online, allocated, 
deallocate on dismount, mounted, software write-locked, file-oriented 
device, shareable, served to cluster via MSCP Server. 
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Error count 0 Operations completed 9 
Owner process " FTAS:" Owner UIC {[FIN, USER] 
Owner process ID 20200066 Dev Prot S:RWPL,O:RWPL,G:R,W 
Reference count 2 Default buffer size 512 
Total blocks 256 Sectors per track 32 
Total cylinders 1 Tracks per cylinder 8 
Allocation class 1 

Volume label "VOLUME 1" Relative volume number 1 
Cluster size 0 Transaction count 1 
Free blocks 0 Maximum files allowed 0 
Extend quantity 0 Mount count 1 
Mount status Process ACP process name "DKAICACP" 


Volume status: ISO 9660. 
Members of this volume set are $1S$DKAl1: (rvn 1), $1$DKA7: (rvn 64), S$1SDKA16: 
(rvn 65535). 


7.3 Setting Security Protection Characteristics on Devices (VAX 


Only) 


<> 


On VAX systems, you can set security protection characteristics on devices using 
the following commands: 


¢ INITIALIZE 

¢ MOUNT 

e SET SECURITY/PROTECTION 
¢ SET VOLUME 


For more information on these commands, see the OpenVMS DCL Dictionary. ¢ 


7.4 Connecting Devices and Loading Device Drivers 


AXP. 


The system uses a software component called a device driver to control I/O 
operations for a particular device type. For a device to function on a system, the 
device must be connected, and the device driver must be loaded into memory. 


The AUTOCONFIGURE command connects all devices physically attached to the 
system and loads their device drivers. Using AUTOCONFIGUREH saves effort and 
reduces the possibility of error. 


The site-independent startup command procedure, STARTUP.COM, automatically 
configures devices, because it includes the AUTOCONFIGURE command. 


On VAX systems, the following commands in STARTUP.COM perform 
autoconfiguration: 


$ SYSGEN := SSYSGEN 
$ SYSGEN AUTOCONFIGURE ALL @ 


On AXP systems, the following commands in STARTUP.COM perform 
autoconfiguration: 


$ SYSMAN := SSYSMAN 
$ SYSMAN IO AUTOCONFIGURE ¢@ 


During autoconfiguration, the CONFIGURE phase of STARTUP.COM creates a 
detached process to do the following: 


¢ Detect any devices connected to a hierarchical storage controller (HSC) 


e Load the drivers for HSC devices 
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e Make the HSC devices known to the system 


The AUTOCONFIGURE command does not connect certain devices. Instead, you 
must manually connect these devices and load their device drivers. In certain 
special cases, you might want to suppress autoconfiguration of devices in system 
startup. See the following sections for more details. 


For More 
Topic Information 
tManually connecting devices and loading drivers Section 7.4.1 
Manually connecting devices and loading drivers Section 7.4.2 
Suppressing autoconfiguration Section 7.4.3 


{VAX specific 


7.4.1. Manually Connecting Devices and Loading Device Drivers (VAX Only) 
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On VAX systems, whenever possible, use the AUTOCONFIGURE command 

to connect standard devices and load device drivers. However, in some cases, 
such as connecting non-Digital devices, you cannot use the AUTOCONFIGURE 
command. In addition, AUTOCONFIGURE does not connect the following devices 
or load their device drivers: 


e Console storage device 
¢ Network communications logical device 
e Virtual terminals 


In addition to these devices, there may be other devices and drivers that 
AUTOCONFIGURE does not connect and load. On VAX systems, use the 
System Generation utility (SYSGEN) to manually connect devices and load device 
drivers. 


For more information, see the SYSGEN section of the OpenVMS System 
Management Utilities Reference Manual and the OpenVMS VAX Device Support 
Manual. 


Caution 


Exercise extreme caution when issuing SYSGEN CONNECT and LOAD 
commands because the system does little error checking. An incorrect 
vector address or misspelled device name, for example, will damage the 
I/O database and could cause the system to fail. 


To manually connect special devices each time the system starts up, add 
these SYSGEN commands to the site-specific startup command procedure 
SYCONFIG.COM. For more information, see Section 5.2.4.1. 


Console Storage Device 
To connect the console storage device on VAX systems, use the following 
CONNECT command: 


$ RUN SYSSSYSTEM:SYSGEN 
SYSGEN> CONNECT CONSOLE 
SYSGEN> EXIT 
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Network Communication Device 


To connect the network communications logical device on VAX systems, run 
SYS$MANAGER:STARTNET: 


$ @SYSSMANAGER: STARTNET 


Virtual Terminals 


For information on pennecuas ’ virtual terminals and loading their driver, see 
Section 7.5.2. 


Event-Handling Device Driver 


A Digital-supplied driver named SYS$SYSTEM:CONINTERR.EXE permits real- 
time processes to connect to interrupt vectors for quick response to and special 
handling of real-time events. The driver is not associated with any specific device 
type. (See the OpenVMS VAX Device Support Manual for further information.) 


Example 


The commands in the following example autoconfigure the devices attached to 
a VAX system, and connect the console block storage device and the network 
software device: 


$ RUN SYSSSYSTEM:SYSGEN 
SYSGEN> AUTOCONFIGURE ALL 
SYSGEN> CONNECT CONSOLE 
SYSGEN> EXIT 

$ @SYSSMANAGER:STARTNET ¢@ 


7.4.2 Manually Connecting Devices and Loading Device Drivers (AXP Only) 


AXP 


On AXP systems, commands for connecting devices and loading their drivers 
are in the System Management utility (SYSMAN). All SYSMAN commands that 
control and display the I/O configuration on an AXP system contain the prefix IO. 


Whenever possible, it is preferable to use the IO AUTOCONFIGURE command to 
connect standard devices and load device drivers. 


IO AUTOCONFIGURE does not connect or load the device driver for the network 
communications logical device. In addition, there may be other devices and 
drivers that IO AUTOCONFIGURE does not connect and load. 


You can connect unattached devices and devices that have nonstandard names, as 
well as load device drivers with the SYSMAN commands IO CONNECT and IO 
LOAD. 


For more information, see the SYSMAN section of the OpenVMS System 
Management Utilities Reference Manual. 
Caution 


Exercise great care in issuing IQ CONNECT and IO LOAD commands. 
Incorrect use of these commands could cause the system to fail. 


To connect the network communications logical device on AXP systems, run 
SYS$MANAGER:STARTNET: 


$ @SYSSMANAGER: STARTNET 
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Example 


The commands in the following example autoconfigure the devices physically 
attached to the AXP system, load their drivers, and connect the network software 
device: 


SYSMAN> IO AUTOCONFIGURE ALL 
SYSMAN> EXIT 
$ @SYSSMANAGER:STARTNET @ 


7.4.3 Suppressing Autoconfiguration of Devices 
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‘Autoconfiguration of devices saves effort and reduces the possibility of error. 


However, you might want to suppress autoconfiguration for the following reasons: 
¢ To customize the order in which you configure devices 
¢ To troubleshoot booting problems 


¢ To allow Small Computer System Interface (SCSI) based workstations to use 
devices on another workstation’s SCSI bus without causing conflicts during 
boot time 


To suppress autoconfiguration, add the following command as the last line of 
SYS$MANAGER:SYCONFIG.COM: 


$ STARTUPSAUTOCONFIGURE ALL == 


Caution 


If you set STARTUP$AUTOCONFIGURE_ALL to 0 in the last line of 
SYCONFIG.COM, the CONFIGURE phase of STARTUP.COM will not 
execute. As a result, HSC controllers (except for an HSC controller 
through which the system booted) and MSCP-served devices on remote 
nodes will not be available and satellite nodes will not be able to access 
network devices and boot disks. This could prevent satellite nodes from 
booting. . 


To suppress autoconfiguration, and still configure HSCs and MSCP- 
served devices on remote nodes, add the following lines to the end of 
SYCONFIG.COM: 


$ STARTUPSAUTOCONFIGURE ALL == 
$ @SYSSSYSTEM:STARTUP CONFIGURE 
$ EXIT 


These commands suppress autoconfiguration and yet still execute the 
CONFIGURE phase of STARTUP.COM. 


Note, however, that if you add the command @SYS$SYSTEM:STARTUP 
CONFIGURE to SYCONFIG.COM, AUTOGEN will fail with the following 


error: 


%RUN-F-CREPRC, process creation failed 
-SYSTEM-F-DUPLNAM, duplicate name 


This error is caused because SYCONFIG.COM is invoked by 

both STARTUP.COM and AUTOGEN. When AUTOGEN runs, 

the CONFIGURE process already exists (it was started when 
SYCONFIG.COM was executed by STARTUP.COM.) When AUTOGEN 
invokes SYCONFIG.COM, the command you added attempts to start a 
second CONFIGURE process. This command fails, causing AUTOGEN to 
fail. 


Managing Peripheral Devices 
7.4 Connecting Devices and Loading Device Drivers 


7.5 Managing Terminals 
To manage terminals, you perform the following tasks: 
e Physically attach terminals to the system 
¢ Set terminal characteristics 
¢ Set up virtual terminals 


The following sections explain setting terminal characteristics and setting up 
virtual terminals. 


7.5.1 Setting Terminal Characteristics 


Terminal device characteristics—for example, the number of characters displayed 
on a line—have certain default values: You might need to change these values, 
depending on the characteristics you use with each terminal. 


To change the terminal device characteristics, use a SET TERMINAL command 
with the appropriate qualifiers in the following format: 


SET TERMINAL/[qualifier,...] [device-name{:]] 


For example, the following command indicates that the width of terminal lines is 
132 characters and that the size of each page is 60 lines. The /NOBROADCAST 
qualifier disables the reception of broadcast messages. The /PERMANENT 
qualifier allows you to keep terminal characteristics between terminal sessions. 
(You must reset characteristics each time the system reboots by adding these 
commands to a site-specific startup command procedure.) 


$ SET TERMINAL/WIDTH=132/PAGE=60 /NOBROADCAST/ PERMANENT 


For more detailed information about the SET TERMINAL command and its 
qualifiers, see the OpenVMS DCL Dictionary. 


7.5.1.1 Setting Default Characteristics with System Parameters 


To change the default terminal characteristics for all terminals on a node, 

you can specify values for the system parameters TTY_DEFCHAR and TTY_ 
DEFCHAR2. For more information on these parameters, see the OpenVMS 
System Management Utilities Reference Manual. For more information on setting 
system parameters, see Section 14.5. 


7.5.1.2 Setting Characteristics in System Startup 
To execute SET TERMINAL commands each time your system boots, add these 
commands to a site-specific startup command procedure. If your configuration 
is simple, you can add the commands to SYSTARTUP_VMS.COM. If your 
configuration requires a large number of commands, create a separate 
command procedure (for example, TERM_SETUP.COM) and execute it from 
the SYSTARTUP_VMS.COM. When the device setup command procedure finishes 
executing, control returns to SYSTARTUP_VMS.COM. 


Caution 


Digital recommends you limit the number of SET TERMINAL commands 
you include in startup command procedures. Large numbers (for example, 
hundreds) of SET TERMINAL commands can significantly slow down 
system startup. If you have a large number of terminals, change the 
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default characteristics using the system parameters TTY_DEFCHAR and 
TTY_DEFCHAR2 as explained in Section 7.5.1.1. 


You may want to include comments to provide the names of terminal owners, as 
shown in the following example. 


Example 


The following example provides sample commands you could include in your 
startup procedure to set up terminal devices: 


$ SET TERMINAL TTC2:/SPEED=300/DEVICE TYPE=LA36/PERMANENT !JONES 


$ SET TERMINAL TTD1:/SPEED=9600/PERMANENT !WRENS 
$ SET TERMINAL TTD4:/SPEED=1200/PERMANENT !JRSMITH 
$ SET TERMINAL TTG4:/SPEED=1200/MODEM/PERMANENT !DIALUP1 


7.5.2 Managing Virtual Terminals 
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Virtual terminals allow users to disconnect from a physical terminal without 
terminating a process; the process remains active on a virtual terminal. Virtual 
terminals are used for the following purposes: 


¢ To reconnect to a process when a modem line connection is lost 
e To maintain sessions on more than one disconnected terminal 
e To use dynamic asynchronous DECnet communication 


Enabling Virtual Terminals 


On VAX systems, you set up virtual terminals by entering the following 
commands: 


$ RUN SYSSSYSTEM: SYSGEN 
SYSGEN> CONNECT VTA0/NOADAPTER/DRIVER=TTDRIVER 
SYSGEN> EXIT ¢ 


On AXP systems, you set up virtual terminals by entering the following 
commands: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> IO CONNECT VTAQ/NOADAPTER/DRIVER=TTDRIVER 
SYSMAN> EXIT ¢ 


Virtual terminals are identified by the VTAn: device name. After the SYSGEN 
or IOGEN command is entered, any terminal with the TT2$M_DISCONNECT 
characteristic set prior to login is treated as a virtual terminal. 


Note 


LAT terminals (LTAn:) can be disconnected if the TT2$M_ DISCONNECT 
characteristic is set, but remote terminals (RTAn:) cannot be 
disconnected. 


You can set the TT2$M_DISCONNECT characteristic in one of two ways: 


e Enable the feature on a systemwide basis by setting the appropriate bit 
in the system parameter TTY_DEFCHAR2. You must use this method for 
dynamically created terminal devices; for example, RTAn: devices. 


e Enable the feature on a per-terminal basis by using the DCL command SET 
~TERMINAL/DISCONNECT. 
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Controlling the Use of Virtual Terminals 
You can control the use of virtual terminal sessions in the following ways: 


¢ Specify the maximum number of detached processes that individual users can 
create by specifying a value for the UAF resource limit MAXDETACH. 


e¢ Restrict the use of virtual terminals by enabling them on a per-terminal basis. 


e Restrict individual users from being able to reconnect to disconnected 
terminal sessions by specifying the UAF flag DISRECONNECT. 


7.5.2.1 Using Virtual Terminals for Dynamic Asynchronous DECnet for OpenVMS 
Virtual terminals are required for dynamic asynchronous DECnet communication. 
A dynamic asynchronous line differs from a static asynchronous line or other 
DECnet line in that it is normally switched on for network use only for 
the duration of a dialup connection between two nodes. Dynamic switching 
of terminal lines to asynchronous DDCMP lines can occur if the following 
requirements are met: 


¢ Both nodes have DECnet licenses registered and loaded 

¢ Both nodes have the asynchronous DDCMP driver NODRIVER loaded 

¢ Both nodes have DYNSWITCH installed as a privileged shareable image 
e The remote node has virtual terminals enabled 


See the DECnet for OpenVMS Networking Manual for a detailed description of 
the procedure for setting up dynamic asynchronous DECnet lines. 


7.5.2.2 Determining the Physical Terminal Type of a Virtual Terminal 


You might want to determine the physical terminal type associated with a virtual 
terminal. Because both direct connect and LAT lines can be virtual, you might 
not know the terminal characteristics of a LAT terminal at system startup 

time. You can set the characteristics of direct connect lines at system startup; 
however, you must enter a SET TERMINAL/INQUIRE command to determine 
the characteristics of a LAT line. (See Section 22.1 for more information on LAT 


software.) 
Note 
Using the command SET TERMINAL/INQUIRE clears the type-ahead 
buffer. 


The following command procedure determines the physical terminal 
characteristics of both direct and LAT lines at system startup. Insert the 
following lines in your systemwide login procedure (SYLOGIN.COM). (This 
procedure assumes that your startup procedure has set all switches and LAT 
lines to “unknown.”) 
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$ DEVCLASS = 'FSGETDVI ("SYSSCOMMAND","DEVCLASS") ’ 

$ IF DEVCLASS .ne. 66 then goto alldone !Not a terminal 

$ DEVTYPE = 'FSGETDVI ("SYS$COMMAND","DEVTYPE") ' 

$ IF DEVIYPE .ne. 0 then goto got devtype 

$ SET TERMINAL/INQUIRE !Try to determine the device type 

$ DEVIYPE = 'FSGETDVI ("SYSSCOMMAND", "DEVTYPE") ' 

$ got_devtype: 

$! Can now dispatch on ‘devtype’ to do different things depending 
$! on the type of terminal. 

$ alldone: 


You can uniquely identify a LAT terminal by using the F$GETDVI lexical function 
and specifying the item TT_ACCPORNAM. The function returns the terminal 
server node name and port name. 


7.6 Managing Printers | 


To manage printers attached to your system, you perform the following tasks: 


Task For More Information 
Set printer characteristics Section 7.6.1 

Spool printers Section 7.6.2.1 
Despool printers Section 7.6.2.2 

Test spooling of printers Section 7.6.2.3 


The following sections explain these tasks. 


7.6.1 Setting Printer Characteristics 
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Printer characteristics must be set prior to starting queues for the printers. The 
SET PRINTER command establishes characteristics for a line printer. The SET 
TERMINAL command can be used to set characteristics for a printer connected 

to a terminal or LAT port. 


In addition, if you want to spool your printers, you must do so before starting 
the queues to be associated with those printers. For information about spooled 
printers, see Section 7.6.2. 


To execute these commands each time your system boots, add these commands 
to your site-specific startup command procedure. If your configuration is simple, 
you can add the commands to SYSTARTUP_VMS.COM. If your configuration 
requires a large number of commands, create a separate command procedure (for 
example, PRINTER_SETUP.COM) and execute it from SYSTARTUP_VMS.COM. 
When the device setup command procedure finishes executing, control returns to 
SYSTARTUP_VMS.COM. 


Example 

The following example provides sample commands you could include in your 
startup procedure to set device characteristics for printers. This example 
also includes the commands used to spool printers. You generally include 
the commands to spool printers along with the commands to set device 
characteristics. 
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$! Set up line printer devices 
1 


$ SET PRINTER/PAGE=60/LOWERCASE/TRUNCATE LPAO: 

$ SET PRINTER/LA11/UPPERCASE/WRAP LPBO0: 

$ SET DEVICE/SPOOLED=(LINE PRINT, SYS$SYSDEVICE) LPAO: 
$ SET DEVICE/SPOOLED=(SYS$PRINT, SYSSSYSDEVICE) LPBO: 
$! 

$! Set up LAT printers 

$! 


§ SET TERMINAL LTA331:/SPEED=9600/DEVICE=LN03 - 
/NOBROADCAST/NOECHO/HARDCOPY/NOTYPE_AHEAD/PERMANENT 

$ SET DEVICE LTA331:/SPOOLED=(MKTGS$LN03_1,SYS$SYSDEVICE) 

$! 

$ SET TERMINAL LTA332:/DEVICE=LA210/PAGE=66 - 
/NOBROADCAST/ PERMANENT 

$ SET DEVICE LTA332:/SPOOLED=(LA210S$PRINT, SYSSSYSDEVICE) 


7.6.2 Using Spooled Printers 


Certain application programs print output by writing or copying data directly to 
a printer rather than submitting it to a queue. A spooled printer causes such 
an application program to write output to an intermediate storage device (such as 
a disk) so that the printer targeted to print the output remains available to other 
system users while the program is running. 


When you spool a printer, you specify a storage device and an output queue to 
be associated with that printer. When a process running an application directs 
its output to the spooled printer, the output is instead placed in a temporary file 
on the storage device. When the file is closed, the system submits the file for 
printing on the associated output queue. Both the spooling of the output file to 
an intermediate storage device and the subsequent queuing of a job consisting of 
this file occur without the direct intervention of the user. 


If your system runs application programs that might write output directly to a 
printer, Digital recommends you spool your printers. Digital recommends you 
also spool your LAT printers to prevent privileged users from writing directly to 
a LAT printer. Writing directly to a LAT printer can.cause problems for output 
queues that use the printer. 


If you want to spool your printers, you must do so before starting the queues to 
be associated with those printers. 


Figure 13-9 illustrates a sample configuration using spooled printers. 
Section 7.6.2.1 describes how to set up a spooled printer. 


7.6.2.1 Spooling Printers 


To spool a printer, use the SET DEVICE/SPOOLED command. This command 
associates the printer with a storage device (such as a disk) and an output queue. 


You must spool a printer before you start the queue to be associated with the 
printer. 


Enter the DCL command SET DEVICE/SPOOLED in the following format: 
SET DEVICE/SPOOLED[=(queue-name[:],intermediate-disk-namef[:])] output-device-name 


You should always specify the intermediate disk and queue explicitly. If the queue 
you associate with the spooled output device is a generic queue, a file written to 
that device is sent to the generic queue, which in turn places the job in one of its 
target queues. As a result, a job copied to the LPAO: device, for example, might 
not necessarily print on the printer LPAO:, but instead might print on one of the 
other printers targeted by the generic queue. 
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When you select an intermediate storage device, make sure that it has sufficient 
free space for the volume of spooled output. If you plan to enforce disk quotas 
on the intermediate device, make sure that all expected users have a quota 
authorized on the intermediate device. The intermediate device must be mounted 
before files can be written to it. 


After establishing an output device as spooled, you should test the device, because 
errors in disk or queue names are not detected until spooling is attempted. This 
step is described in Section 7.6.2.3. 


You should create a command procedure to set up your output devices each time 
the system reboots. Include the commands to set up spooled devices in this 
command procedure. For more information, see Section 7.6.1. 


Example 


The following example illustrates sample commands used to set up spooled 
printers. This example also includes the command used to set device 
characteristics. You generally include the commands to spool printers along 
with the command to set device characteristics in a startup command procedure 
to set up output devices. 


$! Set up and spool line printer devices 
$! 
$ SET PRINTER/PAGE=60/LOWERCASE/TRUNCATE LPA0: 
$ SET PRINTER/LA11/UPPERCASE/WRAP LPBO: 
$ SET DEVICE/SPOOLED=(SYSS$PRINT,SYSSSYSDEVICE) LPAQ: 0 
$ SET DEVICE/SPOOLED=(SYSSPRINT,SYSSSYSDEVICE) LPBO: 

! 


$! Set up and spool LAT printers 
| 


SET TERMINAL LTA331:/SPEED=9600/DEVICE=LN03 - 
/NOBROADCAST/NOECHO/HARDCOPY/NOTYPE_AHEAD/PERMANENT 


SET DEVICE LTA331:/SPOOLED=(MKTG$LN03_1,SYS$SYSDEVICE) 12) 


Ur 


ip a Sp 


SET TERMINAL LTA332:/DEVICE=LA210/PAGE=66 - 
/NOBROADCAST/ PERMANENT 
SET DEVICE LTA332:/SPOOLED=(LA210$PRINT, SYSSSYSDEVICE) © 


Bor 


Spools the output device LPAO: by associating it with the storage device 
SYS$SYSDEVICE and the queue SYS$PRINT. When output from an 
application is directed to LPAO:, the data is temporarily stored on 
SYS$SYSDEVICE until the application completes. This keeps the output 
device LPAO: available for other jobs until the application’s output is ready 
for printing. When the application completes, its output is submitted to the 
queue SYS$PRINT. 


® Spools the LN03 device on LAT port LTA831: by associating it with the 
storage device SYS$SYSDEVICE and the queue MKTG$LN03_1. Digital 
recommends you spool LAT printers. 


© Spools the LA210 device on LAT port LTA832: by associating it with the 
storage device SYS$SYSDEVICE and the queue LA210$PRINT. 
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7.6.2.2 Despooling a Spooled Printer 
Occasionally, you might need to disable spooling on a device. For example, the 
SET TERMINAL command can be executed only on a despooled output device. If 
you need to disable spooling to an output device, use the SET DEVICE command 
with the /NOSPOOLED qualifier. 


You must stop the corresponding queues before you can change the spooling 
status. 


For more information about the SET DEVICE/NOSPOOLED command, see the 
OpenVMS DCL Dictionary. 


7.6.2.3 Testing a Spooled Printer 
After establishing an output device as spooled, you should test the device, because 
errors in disk or queue names are not detected until spooling is attempted. To 
test a spooled device, use a command procedure similar to the following: 


$! *ee*e*xTESTING SPOOLED DEVICE*** 


$! set the device spooled 
$ SET DEVICE/SPOOLED=(SYS$PRINT,SYSSSYSDEVICE:) LPAQ: 


create a test file 

CREATE TEST.LIS 
!Add the first test record here. 
{Ctrl/Z to exit the file 


! 
! write the file to the output device 


$ 
$ 
$ COPY TEST.LIS LPAO: 
$ EXIT 


7.7 Managing Tape Drives 


When managing tape drives, you perform the following tasks: 


Task For More Information 
Get information about tape drives Section 7.7.1 
Change tape drive characteristics Section 7.7.2 


For information about managing volumes on tape drives, see Section 8.2. 


7.7.1 Getting Magnetic Tape Device Information 
You can use the DCL command SHOW MAGTAPE to display the current 
characteristics and status of a specified magnetic tape device. 


You can enter the SHOW DEVICES command to find available magnetic drives 
on your system. The SHOW MAGTAPE or SHOW DEVICE/FULL commands 
enable you to retrieve additional information about the characteristics of a 
particular magnetic tape device. 


When you enter the SHOW MAGTAPE command, you receive the following 
prompt: 


_Device: 


You must then specify the name of the magnetic tape device for which you want 
to display the characteristics and status. 
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Example 


The following example uses the SHOW MAGTAPE command to display the 
characteristics of the MTAO: device. Among other characteristics, it displays the 
device type, density, and format. 


On VAX systems, device protection is RWPL (read, write, physical, logical). 
The SHOW DEVICES display includes the volume protection and the device 
protection. ¢ 


$ SHOW MAGTAPE MTAO: 


MTA0:, device type TU77, is online, error logging is enabled 
Error count 0 Operations completed 0 
Owner process se Owner UIC [SYSTEM] 
Owner process ID 0000000 Dev Prot S:RWPL, O:RWPL, G:RWPL, W:RWPL 
Reference Count 0 Default buffer size 2048 
Density 800 Format Normal-11 


Volume Status: no-unload on dismount, odd parity 


On AXP systems, the device protection information in this display appears as 
follows: 


Dev Prot S:RWED, O:RWED, G:RWED, W:RWED ¢ 


7.7.2 Modifying Magnetic Tape Device Characteristics 
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Use the DCL command SET MAGTAPE to define the default characteristics 
associated with a specific magnetic tape device for subsequent file operations. 
The device must not be currently allocated to any other user. 


The following examples illustrate uses of the SET MAGTAPE command in 
conjunction with the MOUNT command. 


Examples 


1. $ MOUNT MTB1:/FOREIGN 
$ SET MAGTAPE MTB1:/DENSITY=800 


The MOUNT command mounts a tape on the MTB1: device. The /FOREIGN 
qualifier indicates that the tape is not in the standard format used by the 
operating system. (For example, certain Backup utility (BACKUP) operations 
require that you mount a tape with the /FOREIGN qualifier.) The SET 
MAGTAPE command defines the density at 800 bpi for writing to the 
magnetic tape. (The density is reset only if the magnetic tape has never 
been written before.) 


2. $ MOUNT MTAO:/FOREIGN 
$ SET MAGTAPE MTAQ:/SKIP=FILES:4 


The MOUNT command mounts a foreign magnetic tape on the MTAO: device; 
the SET MAGTAPE command directs the I/O subsystem to position the 
magnetic tape to skip four files. 


38. $ MOUNT MTA1:/FOREIGN ~ 
$ SET MAGTAPE/REWIND MTA1: 


The MOUNT command mounts a foreign tape on the MTA1: device; the SET 
MAGTAPE/REWIND command rewinds the volume. 
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7.8 Managing a Card Reader (VAX Only) 


<i> 


On VAX systems, the Digital CR-11 card reader reads computer card decks. 
Users can submit the two following types of card decks for processing: 


e Batch job card decks 
e Data card decks 


To ensure that card decks are processed efficiently, you must understand their 
characteristics and the use of the card reader. The following sections describe 
which cards you should check before processing a deck through a card reader, and 
how to determine which cards are damaged. 


7.8.1 Distinguishing the Type of Card Deck (VAX Only) 


Before loading a card deck into the card reader, you should determine: 


¢ Whether the deck is a batch job or a data deck, because their processing 
requirements differ 


¢ Whether the card reader is set to the correct translation mode 


The following sections describe how to make these determinations. 


7.8.1.1 Batch Job Card Deck (VAX Only) 


A batch job card deck consists of three segments: 
¢ Initial cards 

e Program cards 

e Last card 


The initial two cards in a batch job card deck are the $JOB and the $PASSWORD 
cards. These cards log in the user and the batch job to the system. Following 
the initial two cards are program cards. Program cards contain instructions that 
direct the system to libraries, routines, and data needed to complete the batch job. 
The last card must be either an end-of-job command ($EOJ) card or an end-of-file 
(EOF) card. Either of these cards tells the system that this is the end of the job. 


Checking Input 

The system cannot execute the job without $JOB and $PASSWORD cards. If you 
are given a card deck with these cards omitted, you should return the deck so 
that the user can insert them. 


Since the card deck contains the user’s password, you must ensure that it is 
always handled with care to preserve the security of the user’s account. 


The last card in the deck must be either an $EOJ or an EOF card. 


If the last card is not one of these end cards, you can type an end card on the 
card punch (12-11-0-1-6-7-8-9 overpunch in column 1) and place it at the end of 
the deck. 


Checking Output 


The log file produced by a card reader batch job is queued for printing to the 
default system printer queue, SYS$PRINT. To have the log file queued to a 
different queue, the user can specify the (PRINTER qualifier on the $JOB card. 


If an error occurs while the system is attempting to validate the $JOB and 
$PASSWORD cards, the Operator Communication Manager (OPCOM) sends to 
the card operator an error message that reports the job card and the error. 
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7.8.1.2 Data Card Deck (VAX Only) 


A data deck contains data that will be either read by a program or copied to a 
file for later use. The process that will read the data deck is usually associated 
with an interactive user at a terminal or with a batch job that is submitted by an 
interactive user. Since the user and process already are logged in to the system, 
the first card can contain any data the user wants to specify. Then, either the 
program must read the exact number of cards supplied, or the last card should be 
an EOF card to inform the program that this is the end of the data deck. 


When a user wants a data deck to be read, you should make sure that the user 
has allocated the card reader. If the card reader is not allocated, the system tries 
to submit the deck as a batch job and subsequently just flushes the deck through 
the reader, rejecting the job. 


If the program does not read the exact number of cards (as with the COPY 
command), the EOF card must be the last card in the deck, to inform the program 
that this is the end of the deck. Without this card, the program waits indefinitely 
for more cards, and the system prints “card reader off line” messages on the 
operator’s terminal. If the card deck lacks an EOF card, you can type one on a 
card punch and insert it at the end of the deck. 


7.8.1.3 Setting Card Reader Translation Modes (VAX Only) 


For the system to read input properly, the card reader must be set to the correct 
translation mode—the same as the translation mode of the card punch used to 
prepare the deck. The system supports 026 and 029 card punches. 


Therefore, these conditions must exist for you to be able to set the card reader to 
the correct translation mode: 


e The first card in the deck must be the translation mode card. 
e You must know the mode in which the cards were punched. 


To set the translation mode of the card reader for many decks of the same type, 
use the SET CARD_READER command. See the OpenVMS DCL Dictionary for 
more information about the SET CARD_READER command. By default, when 
the system is booted, the translation mode is set to 029. 


7.8.2 Running the Input Symbiont Interactively (VAX Only) 
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You can run the input symbiont interactively, taking card image input from an 
OpenVMS RMS file, by performing the following steps: 


1. Enter a command in the following format: 
DEFINE/USER SYS$INPUT filename) 
For example: 
$ DEFINE/USER SYSS$INPUT SPECIAL FILE.DAT 
2. Enter the following command: 
$ RUN SYSSSYSTEM: INPSMB 
Running the input symbiont interactively requires the following: 
e CMKRNL privilege 
e Read access to the UAF 
¢ Write access to the default directory of the user 


All messages are displayed to the terminal instead of to the card operator. ¢ 
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Managing Storage Media 


This chapter discusses the following: 


e Storage media terms and concepts 


¢ Volumes and volume sets—Tasks related to setting up both disks and 


magnetic tape drives: initialization and mounting 


¢ Disks—Tasks related to disk maintenance: the management of disk space 


and methods for detecting and repairing disk errors 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task 


Allocating and deallocating disk and tape drives 
Initializing volumes 

Protecting volumes 

Mounting volumes 

Setting up disk volume sets 

Mounting ISO 9660 volume sets and groups 

Mounting tape volume sets 

Dismounting volumes and volume sets 

Using command procedures for media setup 

Managing disk space 

Using the Analyze/Disk_Structure utility to check and repair disks 
Using mount verification for recovery 

Using the Bad Block Locator utility to detect media errors 


This chapter explains the following concepts: 


Concept 


Disks, including Files—11 structures 
Magnetic tape 

Public and private disk volumes 
Tape and disk volume protection 
Disk volume sets 

Disk quotas 

Mount verification 


Section 


Section 8.2 
Section 8.3 
Section 8.4 
Section 8.5 
Section 8.6 
Section 8.7 
Section 8.8 
Section 8.9 
Section 8.10 
Section 8.11 
Section 8.12 
Section 8.13 
Section 8.14 


Section 


Section 8.1.1 
Section 8.1.2 
Section 8.1.3 
Section 8.4 
Section 8.6.1 
Section 8.11.1 
Section 8.13.1 
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8.1 Understanding Storage Media Concepts 


Concepts related to storage media in general include the following: 


Term 


Device (or Drive) 
Media 
Volume 


Definition 
Hardware that allows access to storage media. 
Physical substance on which you can store data. 


Logical unit of data storage; one or more media units. A disk or 
tape must be mounted on a device for the operating system to 
recognize it as a volume. 


The following sections explain these concepts: 


Concept For More Information 
Terms and file structure concepts related to disk media Section 8.1.1 

Terms and concepts related to magnetic tape media Section 8.1.2 

Public and private volumes that reside on storage media Section 8.1.3 

Disk and tape volume protection Section 8.4 


8.1.1 Disk Concepts 


This section defines terms related to disks and describes reserved files and file 


structures. 


8.1.1.1 Disk Terminology 
A disk is a physical medium on which files reside. Files—11 On-Disk Structure 
refers to a logical structure given to information stored on a disk; it is a 
hierarchical organization of files, their data, and the directories needed to gain 
access to them. The OpenVMS file system implements the Files—11 disk structure 
and provides access control to the files located on the disk. (The term Files—11 
used alone always refers to Files—11 On—Disk Structure.) 
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Table 8—1 defines terms as they apply to disks. Appendix A discusses these terms 


in more detail. 


Table 8-1 Files—11 On-Disk Structure Terminology 


Term 


Block 
Cluster 


Extent 
File 


Volume 


Definition 
Files—11 defines a block as 512 8-bit bytes. 


Logical grouping of blocks; basic unit by which disk space is allocated. 
The term cluster usually refers to a set of nodes that form a VMScluster 
environment. 


Contiguous blocks allocated to a particular file. 


Array of consecutive virtual blocks, numbered 1 to n, plus a set of 
attributes with values. A file is either a data file or a directory file. 
Directories can contain both data files and directory files. 


Disk that has been prepared for use by placing a new file structure on 
it. 
(continued on next page) 
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Table 8-1 (Cont.) Files—11 On-Disk Structure Terminology 


Term Definition 
Volume set Combination of several volumes; has the appearance of one large 
volume. 


Information on a disk can be accessed as logical blocks on the disk or as virtual 
blocks of files on the disk. 


Figure 8—1 shows the hierarchy of blocks, extents, and files in the Files—11 On- 
Disk Structure. The number of blocks in any one extent is a multiple of the 
cluster size. 


Figure 8-1 Files—11 On-Disk Structure Hierarchy 


~ File 


Extent 1 Extent 2 Extent 3 


ZK-0739-GE 


8.1.1.2 Disk File Structures 
The operating system recognizes the following disk file structures. 


File Structure Description 
+Files-11 ODS Level 1 On VAX systems, this structure is used by Digital’s RSX-11M, 


RSX-11D, RSX-11M-—PLUS, and IAS operating systems. 
Files—11 ODS Level 2 This is the default disk structure of the OpenVMS operating 


system. — 

ISO 9660 volume This format is used on CD-ROMs. 

structure 

Foreign A structure that is not related to a Files—11 structure. When 
you specify a foreign structure, you make the contents of 
a volume known to the system, but the system makes no 
assumptions about its file structure. 

fVAX specific 


A Files—11 volume is an array of 512-byte logical blocks. The blocks are numbered 
consecutively from 0 to n—1; the value of n is the size of the disk in blocks. 
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When you create a file, you normally specify a file name to OpenVMS RMS, which 
assigns this name to the file on a Files—11 volume. OpenVMS RMS places the 
file name and file ID associated with the newly created file in a directory, which 
contains an entry defining the location for each file. 


When you access the file, you supply the file name, which supplies a path to the 
file identifier through the directory entry. The file identifier, in turn, points to the 
location of the file header, which contains a listing of the extent or extents that 
locate the actual data. 


Reserved files control the structure of a Files-11 ODS Level 2 volume. (Only five 
of these files are used for a Level 1 volume.) Table 8—2 identifies all reserved 
files, and indicates to which Files—11 ODS level they pertain. 


The files listed in Table 8—2 are in the master file directory (MFD), [000000]. 
Appendix A contains a description of each reserved file. 


Table 8-2 Reserved Files 


+Structure Structure 
Reserved File File Name Level 1 Level 2 
Index file INDEXF.SYS;1 X Xx 
Storage bit map file BITMAP.SYS;1 X Xx 
Bad block file BADBLKE.SYS;1 Xx X 
Master file directory 000000.DIR;1 X X 
Core image file CORIMG.SYS;1 X XxX 
Volume set list file VOLSET.SYS;1 xX 
Continuation file CONTIN.SYS;1 x 
Backup log file BACKUP.SYS;1 X 
Pending bad block BADLOG.SYS;1 Xx 
tVolume security profile SECURITY.SYS;1 X 


VAX specific 


8.1.1.3  CD—ROM File Structures 
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Compact Disc Read Only Memory (CD-ROM) discs and readers used with 
computers are very similar to the CD-ROMs used for audio applications. The 
major differences are that CD-ROM computer disc players have a digital (rather 
than an audio) interface; they also incorporate internal circuitry that detects and 
corrects errors, thus improving the integrity of the disc data. 


Following are three advantages to storing data on CD-ROM media: \ 
e You can access data directly. 
¢ CD-ROMs are typically less expensive than other direct-access media. 


¢ CD-ROMs have exceptional storage space capability. Currently, a CD-ROM 
can hold approximately 650 megabytes of data. 


You can use one or more formats to incorporate a volume and file structure that is 
compatible with the input/output processing used by the system. Table 8-3 shows 
the media formats that the OpenVMS operating system supports for CD-ROMs. 
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Table 8-3 CD-ROM On-Disc Formats 


Format 


Files—11 ODS-2 
ISO 9660 
High Sierra 


Description 


The operating system’s format for read/write discs 
An international standard for CD-ROMs: ISO 9660 : 1988 
An initial proposal that was changed and became ISO 9660 


How Data Is Arranged on a CD-ROM 
Table 8-4 defines terms that describe the arrangement of data on a CD-ROM. 


Table 8—4 CD-ROM Volume Structure 


Element 
Sector 
Physical 


sector 


Logical sector 


Volume space 
System area 
Data area 
Logical block 


Logical block 
numbering 


Description 


Uniquely addressable unit; each sector on a CD-ROM comprises a 
sequence of 2048 8-bit bytes. 


Division of a system or data area; smallest addressable unit on an ISO 
9660 CD-ROM. 


Organizational unit of a volume; consists of one or more physical 
sectors. No more than one logical sector can begin in any physical 
sector. 


Logical sectors are numbered in ascending order, with 0 assigned to the 
logical sector having the lowest physical address containing recorded 
data. Each logical sector includes a data field made up of 2048 or more 
bytes (the number of bytes always equals a power of 2). 


Set of all logical sectors on a volume containing information about the 
volume. 


One of two divisions of CD-ROM volume space; includes logical sectors 
0 through 15; reserved for system use. 


One of two divisions of CD-ROM volume space; includes the remaining 
volume space, beginning with logical sector 16. 


Organizational unit of volume space. The logical block size cannot 
exceed the logical sector size. 


Begins with the first byte in the volume space and continues in a 
sequentially ascending order through the remainder of the volume 
space, 


Logical block numbering is consecutive throughout the volume and 
continues through area boundaries. For example, if the last logical 
block in the system area is 255, the first logical block in the data area 
is assigned number 256. 


OpenVMS System Requirements 

The OpenVMS implementation of Files—11 CD conforms to the file structures 
defined by the ISO 9660 standard. Two aspects of the implementation are 
required to support ISO 9660 file structures in an OpenVMS environment: 
partially recorded data blocks and data interleaving. 


e Partially recorded data blocks 


ISO 9660 files are recorded in the data area of the media, using extents that 
consist of blocks. The blocks might or might not be filled with data. The 
system assumes that all file blocks are filled with data, with the possible 
exception of the final block. When the system finds a data block that is not 
filled, it attempts to process the end of a file. The OpenVMS implementation 
of Files—11 ensures that the system does not treat an unfilled block as the end 
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of the file unless it actually is the final file block. This is not visible to the 
user. 
¢ Data interleaving 


The use of data interleaving improves access to file data. Within an extent, 
data is recorded using file units that are separated by an Br ae gap; this 
gap consists of a specified number of blocks. 


8.1.2 Tape Concepts 
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The file storage system for magnetic tapes is based on the standard magnetic 
tape structure as defined by ISO 1001-1986, which is compatible with several 
national standards such as ANSI X3.27—1987. 


For more information about tape concepts, see the Guide to OpenVMS File 
Applications. 


Table 8-5 defines terms that apply to magnetic tapes. 


Table 8-5 Terms Related to Magnetic Tapes 


Term Definition 

Block On magnetic tape, the size of a block is determined by the user. 
(On ODS disks, a block is fixed at a size of 512 bytes.) 

bpi Bits per inch; measure used for characters of data on tape on 
OpenVMS systems. Also called density. 

IRG Interrecord gap; interval of space between blocks. 

Record blocking Grouping of individual records into a block, thereby reducing 


wasted space. 


Sequential Organization of magnetic tape data; that is, data is organized in 
the order in which it is written to the tape. 


Magnetic Tape Internal software process of the operating system that interprets 
Ancillary Control the logical format of standard-labeled volumes. 
Process (MTACP) 


Beginning-of-tape Pieces of photoreflective tape that appear on every volume to 
(BOT) marker and delimit the writable area on the volume. 
end-of-tape (EOT) 


ANSI standards require that a minimum of 14 feet to a maximum 
marker 


of 18 feet of magnetic tape precede the BOT marker; a minimum 
of 25 feet to a maximum of 380 feet of tape, of which 10 feet must 
be writable, must follow the EOT marker. 


The EOT marker indicates the start of the end of the writable area 
of the tape, rather than the physical end of the tape. Therefore, 
data and labels can be written after the EOT marker. 


Data record Within tape files, data records are stored in variable-size data 
storage blocks. Each block contains one or more records. OpenVMS RMS 
provides management of records. 


Header labels Set of labels that the tape file system writes on the tape 
immediately preceding the data blocks when you create a file on 
tape. These labels contain information such as the user-supplied 
file name, creation date, and expiration date. To access a file on 
magnetic tape by the file name, the file system searches the tape 
for the header label set that contains the specified file name. 


(continued on next page) 
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Table 8-5 (Cont.) Terms Related to Magnetic Tapes 


Term Definition 

Trailer labels Set of labels that the tape file systems writes on the tape following 
the file. 

Multivolume file Additional volume on which a file is continued when the data 


blocks of a file or related files do not physically fit on one volume 
(a reel of magnetic tape). 


Volume set The volumes on which a set of files is recorded. 


Record Blocking 
Figure 8—2 shows how record blocking can save space. 


Figure 8-2 Record Blocking 


Without Record Blocking 


Record Record Record — Record Record 
Record Record Record Record | Record 






With Record Blocking 


All 10 Records 





ZK-0741-GE 


Assume that a 1600-bits-per-inch magnetic tape contains 10 records that are not 
grouped into a block. Each record is 160 characters long (0.1 inch at 1600 bits per 
inch) with a 0.6-inch IRG after each record, which uses 7 inches of tape. However, 
placing the same 10 records into one block uses only 1.6 inches of tape (1 inch for 
the data records and 0.6 inch for the IRG). 


Record blocking also increases the efficiency of the flow of data into the computer. 
For example, 10 unblocked records require 10 separate physical transfers, while 
10 records placed in a single block require only one physical transfer. Moreover, 
a shorter length of magnetic tape is traversed for the same amount of data; thus, 
the operation is completed in less time. 
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However, record blocking requires more buffer space to be allocated for your 
program. The greater the number of records in a block, the greater the buffer 
size requirements. You must determine the point at which the benefits of record 
blocking cease. Base this determination on the configuration of your computer 
system and your environment. 


8.1.3 Public and Private Disk Volumes 


A volume is one or more units of storage media that you can mount on a device. 
The volume is the largest logical unit of disk file structure. 


This section explains the concepts of public and private volumes. 


8.1.3.1 Public Disk Volumes 
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A public volume is a file-structured disk volume that can contain both private 
and public files. Public volumes can be either of the following: 


Type of Volume Description 
System volumes Available to all the users on a system 
Group volumes Available to all the users in a group 


As long as file protections permit it, all users have access to public volumes and 
to the files on them. 


One way to permit users to create and store files on a public volume is to create 
a default directory on the public volume for each authorized user. You control 
access to public files and volumes by the protection codes that you establish. 


A user is free to create, write, and manipulate files on a public volume only under 
the following conditions: 


¢ Volume and file protection allow access, or you have privileges that allow you 
to access the files. 


¢ The user has appropriate access to a directory on the volume. 
e Disk quota permits usage. 
Following are guidelines for setting up and maintaining public files and volumes. 


Planning Public Volumes 


As a system manager, you must balance users’ space needs with the system’s 
available mass storage resources. These determinations depend, in part, on 
whether you have relatively small or large mass storage capability. A comparison 
of the two follows. 


Configuration Characteristics 


Small mass storage Both system files and user files are on the same public volume. 
You might want to set disk quotas to ensure that user files do not 
exhaust the free space on the disk volume. 


Large mass storage Keep all system files on one disk volume (known as a system disk 
or a system volume), and keep all user files on separate volumes. 


The system disk is kept active reading system images, paging and 
swapping, spooling files, maintaining system logs, and so forth. 


The most common arrangement is to have one public volume with system files 
and the directories of privileged users, and other public volumes dedicated to user 
directories, databases, and applications required by your site. 
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Whichever arrangement you select, plan each public volume and monitor disk 
performance once the system is running: 


e Be sure the system disk has enough space for the operating system to boot 
and accept updates. 


¢ Once the system is running, use the Monitor utility to analyze disk use to 
determine whether disk I/O is balanced across the configuration. Section 17.7 
discusses this utility in detail. 


You can often move system files off the system disk and use search lists or logical 
names to access them. See Section 16.8 for more information. 


In large configurations, you can place secondary paging and swapping files on 
other devices to balance disk load. See Section 15.11 for more information. The 
Guide to OpenVMS Performance Management provides detailed information on 
redistributing system files and achieving a balanced disk load. 


8.1.3.2 Private Disk Volumes 
A private volume is a file-structured volume that contains only private files. 


Under some circumstances, users might want to perform their work on a device 
that unauthorized users cannot access. By creating a private volume and 
mounting it on a device allocated exclusively to a user’s process, you ensure 
that users can perform their work without fear of interference from others. 


Users can often prepare and manipulate their own private volumes. They might, 
however, need your assistance if the computer and its peripheral devices are off 
limits to or remotely located from them. Users requiring assistance can use the 
Operator Communication Manager (OPCOM) to communicate with an operator. 
See Section 8.5.3 for instructions on answering users’ requests for assistance. 


8.2 Allocating and Deallocating Drives 


This section explains how to allocate and deallocate drives. The only situation in 
which the ALLOCATE command is required, however, is when you must retain 
control of the same volume across dismounts. An example of this is when you 
alternate between mounting a tape /FOREIGN and /NOFOREIGN. 


8.2.1 Allocating Drives 


You use the DCL command ALLOCATE to logically assign a disk drive or a tape 
drive to your process. You might do this if you suspect an error and want to 
reserve a disk while you repair the error. . 


The ALLOCATE command allocates only one device to a process. To allocate 
several devices, you must use multiple commands. 


How to Perform This Task 
Enter the ALLOCATE command using the following format: 


ALLOCATE device-name[:] {logical-name] 


where: 

device-name Specifies the drive on which the volume will be loaded. The device 
name can be a physical, generic, or logical name. 

logical-name Specifies an optional logical name to be associated with the specified 


disk or tape drive. 
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Examples 


1. $ ALLOCATE DUA2: 
$DCL-I-ALLOC, _MARS$DUA2: allocated 


In this example, the ALLOCATE command specifies a physical device named 
DUA2:, which requests the allocation of a specific RK10 disk drive; that is, 
unit 2 on controller A. The response from the ALLOCATE command indicates 
that the device was successfully allocated. 


2. $ ALLOCATE/GENERIC RA90 MYDISK 


This example shows how to use the /GENERIC qualifier with the ALLOCATE 
command to allocate a particular type of device. In this case, the system 
allocates the first available RA90 drive to your process. 


For further discussion of the /GENERIC qualifier and other qualifiers that you 
can use with the ALLOCATE command, see the OpenVMS System Management 
Utilities Reference Manual. The OpenVMS User’s Manual contains additional 
examples of the ALLOCATE command. 


8.2.2 Deallocating Drives 
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Allocating a device reserves that device for exclusive use by your process. The 
device remains allocated to your process until you explicitly deallocate it or until 
you log out. 


Logging out of a process from which drives have been allocated automatically 
deallocates all explicitly and implicitly allocated drives; therefore, you do not 
need to explicitly deallocate a disk or a tape drive that has been allocated to your 
process. However, Digital recommends that you use the DEALLOCATE command 
(or a command procedure containing this command) explicitly to deallocate all the 
drives you allocated with the ALLOCATE command. 


How to Perform This Task 


Use the DCL command DEALLOCATE to explicitly deallocate a disk drive or tape 
drive that has been allocated to your process. A complement to the ALLOCATE 
command, the DEALLOCATE command logically disconnects a drive from your 
process and returns it to the pool of devices. 


Enter the DEALLOCATE command using the following format: 
DEALLOCATE device-namef{:] 


where: 

device-name Specifies the drive on which the volume will be loaded. The device 
name can be a physical, generic, or logical name. 

Example 


The following example shows how to explicitly deallocate a tape drive or a disk 
drive: 


$ DEALLOCATE MUAI1: 


In this example, the DEALLOCATE command logically disconnects tape drive 
MUAI: from your process. The system returns you to DCL level. 
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8.3 Initializing Volumes 


To set up a disk or tape volume, you issue DCL commands in the following order: 


Command Use 
1. INITIALIZE To format the volume and write an identifying label on the volume. 


This effectively removes the previous contents of the volume. (You 
do not need to initialize a volume each time you use it.) 


2. MOUNT To make a volume, and the files or data it contains, accessible to a 
user’s process. 


This section contains instructions for initializing volumes. Section 8.5 contains 
instructions for mounting volumes. Before you initialize a volume, you might 
want to refer to Section 8.4, which contains information about volume protection. 
Setting Up Media on a Workstation 


For workstations with removable media, users can perform the tasks shown in 
Table 8-6 unassisted. 


Table 8-6 Tasks Users Can Perform Unassisted 


Task Description 
Load Insert the media into the drive. 
Initialize Remove all previous contents from the media. (VOLPRO privilege is 


required for most operations.) 


Mount Logically mount the media and allocate the device (requires SYSNAM, 
GRPNAM, or VOLPRO privilege for various operations). To mount a 
volume on a device, you must have read (R), write (W), or control (C) 
access to that device. 


Perform file Access files and perform the desired operations on them. 

operations 

Dismount Logically dismount the media and deallocate the device (requires 
GRPNAM and SYSNAM user privileges to dismount group and system 
volumes). 

Unload Remove the media from the drive compartment. 


For specific information on manipulating removable media on your system, see 
the Upgrade and Installation Manual for your computer. 


You initialize a disk or tape volume for one or both of the following reasons: 
¢ To delete all old information from the volume. 


¢ To give the volume a structure that is recognized by the operating system. 


This structure prepares a volume to receive data and stores it so that the 
operating system can locate it easily. 


Before you or any users can write files or data to a disk or a tape volume, you 
need to initialize a volume. 
Caution 


Initializing a disk volume removes links to existing files on the volume, 
which, in effect, deletes (but does not erase) the files. If you want to erase 
the data in a file, use the INITIALIZE/ERASE command. 
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Do not initialize a volume that contains data that users might want to 
keep. (You do not necessarily need to initialize a volume each time you 
use it.) 


How to Perform This Task 


Use the DCL command INITIALIZE to format and write a label to the volume. 
To initialize a disk or tape volume, enter the INITIALIZE command using the 
following format: 


INITIALIZE device-namef:] volume-label 


where: 

device-name Specifies the name of the device on which the volume is to be physically 
mounted and then initialized. To prevent initializing another user’s 
volume, allocate a device before you initialize the volume. (Prior 
allocation is not required, however.) 

volume-label Specifies the identification to be encoded on the volume; is 1 to 12 


alphanumeric characters. 


To initialize a public volume, you must specify the /SYSTEM qualifier with the 
DCL command INITIALIZE: | 


INITIALIZE/SYSTEM device namef[:] volume-label 


For more details on INITIALIZE command format, see the OpenVMS DCL 
Dictionary. 


Examples 

1. $ INITIALIZE DUA2: TEMP 
The command in this example initializes the disk volume DUA2: and labels 
the volume TEMP. 

2. $ INITIALIZE MUB2: TEST 


The command in this example initializes the tape volume on MUB2: and 
labels the volume TEST. 


The OpenVMS User’s Manual contains additional examples of the INITIALIZE 
command. 


8.3.1 Using INITIALIZE Command Qualifiers 
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Table 8—7 describes a number of qualifiers you can use with the INITIALIZE 
command. Selecting appropriate values for these qualifiers and selecting the 
appropriate position for the index file involve tradeoffs. The OpenVMS DCL 
Dictionary contains more information about each qualifier. 


Table 8—7 INITIALIZE Command Qualifiers 


Qualifier Description 
/CLUSTER_ Specifies minimum allocation unit in blocks. 
SIZE=n 


(continued on next page) 


Managing Storage Media 
8.3 Initializing Volumes 


Table 8-7 (Cont.) INITIALIZE Command Qualifiers 


Qualifier Description 


/HEADERS=n Specifies the number of file entries, called file headers, that you 


expect to have in the index file. (The system accesses the index file 
each time it needs to locate a file on disk.) 


The system preallocates the number of headers you specify to the index 
file. Setting the number too low can result in a fragmented index file. 
However, if you set the number too high, space allocated to headers 
cannot be made available later for file storage. 


/INDEX=position Determines the location of the index file on a volume, using the 


keyword BEGINNING, MIDDLE, or END. The index file lists the 
names and addresses of all disk files, so it is constantly referenced. 


/MAXIMUM _ Specifies the maximum number of entries in the index file, and 
FILES=n therefore limits the number of files that a volume can contain. Once 


set, the maximum number of files for a volume cannot be increased 
without reinitializing the disk. 


/PROTECTION= __ Specifies the protection code to be assigned to a volume. See Section 8.4 
keyword for details. 


/WINDOWS=n Sets the default number of mapping pointers to be allocated for file 


windows. When a file is opened, the file system uses mapping pointers 
to access data in the file. The file system can read one file segment into 
memory for each available pointer. 


Examples 


1. 


$ INITIALIZE/HEADERS=100000 DUA3: 

This example shows how many entries to allocate in the index files for a large 
disk (a small disk might allocate 2000 entries). 

$ INITIALIZE/MAXIMUM_ FILES=20000 DUA3: 


This example shows how to specify the characteristics of a small disk. Note 
that each directory and each extension header of a multiheader file counts as 
a file against this maximum value. 


§ INITIALIZE/WINDOWS=10 DUA3: 


This example shows how to cite a large number of pointers for a large disk of 
500 MB. 


8.3.2 Assisting Users in Accessing and Initializing Volumes 


You might need to initialize volumes for users in some circumstances, including 
the following: 


If the volume previously contained data, the protection code might prevent 
users from accessing and initializing the volume. 


If the first file section on the volume has not reached its expiration date, 
users might not be able to initialize a tape volume. 


If the volume is owned by anyone except [0,0], the user must have VOLPRO 
privilege to override volume protection. If users do not have VOLPRO 
privilege, they must ask the previous owner of the volume or you, as system 
manager, to initialize it for them. 
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e Ifa tape is blank, the user needs VOLPRO and OPER privilege to access and 
initialize it. 


8.4 Protecting Volumes 
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UIC-based protection, which is based on user identification codes (UICs), restricts 
users’ access to volumes. By assigning access types to volumes, you determine the 
kinds of actions various groups of users can perform on volumes. Section 8.4.1 
and Section 8.4.2 explain, respectively, differences between UIC-based protection 
for disk and tape volumes. 


On VAX systems, you can set ACLs on volumes for additional access control. 
Volume ACLs are copied from the VOLUME.DEFAULT security class template. 
See-Section 11.5 for more information about ACLs. ¢ 


For a full explanation of OpenVMS protection, see Chapter 11 or the Security 
Guide. 


Table 8-8 shows the types of access you can assign to disk and tape volumes. 


Table 8-8 Access Types for Disk and Tape Volumes 


Access Type Description 


Read Gives you the right to examine file names, print, or copy files from the 
volume. System and owner categories always have read access to tape 
volumes. 

Write Gives you the right to modify or write to existing files on a volume. The 


protection of a file determines whether you can perform a particular 
operation on the file. To be meaningful, write access requires read access. 
System and owner categories always have write access to tape volumes. 


*Create On VAX systems, gives you the right to create files on a disk volume and 
subsequently modify them. Create access requires read and write access. 
This type of access is invalid for tape volumes. 


£Execute On AXP systems, gives you the right to create files on a disk volume and 
subsequently modify them. Execute access requires read and write access. 
This type of access is invalid for tape volumes. 


Delete Gives you the right to delete files on a disk volume, provided you have 
proper access rights at the directory and file level. Delete access requires 
read access. This type of access is invalid for tape volumes. 


Control Gives you the right to change the protection and ownership characteristics 
of the volume. Users with the VOLPRO privilege always have control 
access to a disk volume, with the following exceptions: 


¢ Mounting a file-structured volume as foreign requires control access or 
VOLPRO privilege. 


e Mounting a volume containing protected subsystems requires 
SECURITY privilege. 


Control access is not valid with tapes. 


TVAX specific 
tAXP specific 


For more information on specifying protection codes, see the Security Guide. 
Chapter 11 discusses protection in general. 
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The following sections explain how to perform these operations: 


Operation For More Information 
Protect disk volumes Section 8.4.1 

Protect tape volumes Section 8.4.2 

+Audit volume access Section 8.4.3 

TVAX specific 


8.4.1. Protecting Disk Volumes 


For file-structured ODS-2 volumes, the OpenVMS operating system supports the 
types of access shown in Table 8-8. The system provides protection of ODS-2 
disks at the volume, directory, and file levels. Although you might have access to 
the directories and files on the volume, without the proper volume access, you are 
unable to access any part of a volume. 


The default access types for the disk volume owner [0,0] are: 
On VAX systems, S:RWCD, O:RWCD, G:RWCD, W:RWCD. ¢ 
On AXP systems, S:RWED, O:RWED, G:RWED, W:RWED. ¢ 





The system establishes this protection with the default qualifier of the 
INITIALIZE command (/SHARE). Any attributes that you do not specify are 
taken from the current default protection. 


Ways to Specify Protection 

You can change permanently stored protection information in the following ways: 

¢ Use protection qualifiers with the DCL command INITIALIZE to specify 
UIC-based protection when you initialize a volume. 


You can also specify protection when you mount disk volumes, but you 
ordinarily do not do so because the protection that you specify is in effect 
only while the volume is mounted. For details, refer to the Mount utility in 
the OpenVMS System Management Utilities Reference Manual. 


¢ Use the DCL command SET VOLUME after you mount a volume to change 
UIC-based volume protection. 


> ¢ On VAX systems, use the DCL command SET SECURITY to modify the 
default security profile after a volume is mounted, including UIC- and ACL- 
based protection. ¢ 


The following sections explain how to perform these tasks: 


Task For More Information 
Specify protection when you initialize volumes Section 8.4.1.1 
Change protection after volumes are mounted Section 8.4.1.2 
Display protection Section 8.4.1.3 
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8.4.1.1. Specifying Protection When You Initialize Disk Volumes 


This section explains how to specify UIC-based volume protection and ISO 
9660-formatted media protection when you initialize volumes. 
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How to Specify UIC-Based Protection 


You can specify protection in one of the following ways when you initialize 
volumes: 


Use the /PROTECTION qualifier with the INITIALIZE command. For 
example: 


$ INITIALIZE DUA7: ACCOUNT1/PROTECTION=(S:RWCD,0:RWCD,G:R,W:R) 


On AXP systems, E (execute) replaces C (create) in the protection codes shown 
in the example. ¢ 


This example specifies a protection code for the disk volume ACCOUNTI on 
the DUA7: device. The UIC of the volume is set to your process UIC. 


Use one or more of the qualifiers shown in Table 8-9 with the INITIALIZE 
command. However, the protection that you set using the /PROTECTION 
qualifier overrides any of the defaults set when you use any other qualifier. 


Using INITIALIZE Command Qualifiers for Protection 


You usually do not change volume protection after you initialize a volume. 
By specifying a protection qualifier with the INITIALIZE command, you can 
establish the default protection of a volume. (The default qualifier of the 
INITIALIZE command is /SHARE, which grants all types of ownership all 
types of access.) 


Table 8—9 explains the qualifiers you can use to specify disk volume protection 
when you initialize disk volumes. 


Table 8-9 INITIALIZE Command Qualifiers for Protection 


Qualifier Explanation 


/PROTECTION The protection you specify with this qualifier overrides any 


protection you specify with other qualifiers. 


/SYSTEM All processes have read, write, create', and delete access to 


the volume, but only system processes can create first-level 
directories. ({1,1] owns the volume.) See the note following 
this table. 


/GROUP System, owner, and group processes have read, write, create’, 


and delete access to the volume. World users have no access. 


/NOSHARE System and owner processes have read, write, create', and 


delete access to the volume. World users have no access. 
Group users also have no access unless you specify the 
/GROUP qualifier. 


10n AXP systems, E (execute) replaces C (create) in protection codes. 


Note 


The /SYSTEM qualifier grants all users complete access. However, users 
cannot create directories or files unless you do one of the following: 


¢ Change the protection on the newly created master file directory 
(MFD), [000000]000000.DIR;1 to allow users to create their own 
directories under this parent directory. 
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e Under the master file directory, create user directories that give 
users write access so that they, in turn, can create their own 
directories. 


System managers usually choose the second method. 


Table 8-10 shows the UIC and protection that the system sets for disk volumes 
when you use the default (SHARE) and other qualifiers with the INITIALIZE 
command. 


Table 8-10 Protection Granted with INITIALIZE Command Qualifiers 


Qualifier UIC Protection’ 

/SYSTEM [1,1] S:RWCD,O:RWCD,G:RWCD,W:RWCD 
/SYSTEM/NOSHARE _[11] S:RWCD,O:RWCD,G:RWCD,W:RWCD 
/GROUP [x0] S:RWCD,O:RWCD,G:RWCD,W 
/SHARE (the default) [x,x!? S:RWCD,O:RWCD,G:RWCD,W:RWCD 
/NOSHARE | [x,x)? S:RWCD,O:RWCD,G,W 


1On AXP systems, E (execute) replaces C (create) in protection codes. 
2x,x is the UIC of the process that performs the initialization. 


How to Specify ISO 9660-Formaited Media Protection 


The OpenVMS implementation of ISO 9660 does not include volume or volume set 
protection. The protection specified for the device on which the media is mounted 
determines accessibility to the ISO 9660 volumes or volume sets. 


By default, the device protection is assigned to ISO 9660 files and directories. 
When you mount the volume, you can specify additional file protection using 
the UIC and PERMISSION protection fields included in the Extended Attribute 
Records (XARs) that might be associated with each file. 


You can enable the protection fields by specifying either of the following: 
e XAR mount option, using the following format: 
MOUNT/PROTECTION=XAR 


When you specify the XAR option for a file that has an associated XAR, the 
protection fields in the XAR are enabled. 


¢ Digital System Identifier (DSI) mount option, using the following format: 
MOUNT/PROTECTION=DS! 


If you specify the DSI option, you enable the XAR permissions Owner and 
Group for XARs containing DSI. 


For more information about the XAR and DSI options, see the OpenVMS Record 
Management Utilities Reference Manual. 
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8.4.1.2 Changing Protection After Disk Volumes Are Mounted 


This section explains how to perform the following operations after volumes are 
mounted: 


e Change UIC-based volume protection 
¢ Change ACL-based protection (VAX systems only) 


How to Change UIC-Based Protection 


To change UIC-based protection after a volume is mounted, use the SET 
VOLUME/PROTECTION command. For example: 


$ SET VOLUME/PROTECTION=(S:RWCD,O:RWCD,G:RC,W:RC) DUAO: 


On AXP systems, E (execute) replaces C (create) in the protection codes shown in 
the example. ¢ 





The protection set in this example allows the system and owner all types of 
access. Group and world access types can only read files and run programs. Any 
category not specified in the protection code (S,O,G,W) is unchanged. 


How to Change ACL-Based Protection (VAX Only) 


On VAX systems, you can change protection by using the SET SECURITY 
/CLASS=VOLUME command with the /PROTECTION; /OWNER, or /ACL 
qualifier to change any aspect of the volume security profile. For example: 





$ SET SECURITY/VOLUME/ACL=( IDENTIFIER=DOC , ACCESS=READ+WRITE+EXECUTE) - 
_$ $1$DSA7: 


This example for VAX systems gives holders of the DOC identifier read, write, 
and execute access to the $1$DSA7: volume. ¢ 


8.4.1.3 Displaying Protection 
This section explains the Soman you can use to display protection. 


How to Display UIC-Based Protection 

You can use the SHOW DEVICES/FULL command to display the current UIC- 
based protection code. 

How to Display UIC- and ACL-Based Protection (VAX Only) 


On VAX systems, you can also use the SHOW SECURITY/CLASS=VOLUME 
command to display protection. For example: 





$ SHOW SECURITY/CLASS=VOLUME $1SDSA27: 
Following is an example of the resulting display: 


$1$DSA27: object of class VOLUME 
Owner: [1,1] 
Protection: (System: RWCD, Owner: RWCD, Group: RWCD, World: RWCD) 
Access Control List: 
( IDENTIF IER=[ ABC, SADAMS } , ACCESS=READ+WRITE+CREATE+DELETE ) 


In the display are the name and profile of the VOLUME class object. The profile 
includes the owner, the protection code, and the access control list (ACL) of the 
protected object. ¢ 
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8.4.2 Protecting Tape Volumes 


The system protects magnetic tapes only at the volume level. You establish 
protection when you initialize tape volumes; after that, the Mount utility enforces 
the protection that you have established. 


You can use two levels of protection for tape volumes: 


Level of Protection Description 
Guidelines of the ISO The ISO standard, which is the first level of protection, is 
standard encoded in the accessibility field of the first volume label 


written on the magnetic tape. With this protection scheme, you 
can protect tape volumes in environments where interchange 
exists between the OpenVMS system and non-OpenVMS 
operating systems. 


UIC-based protection This second level of protection is encoded in the second volume 
scheme supported by label written on the magnetic tape. Only OpenVMS systems 
system software check this scheme; it is ignored in any interchange with 


non-OpenVMS systems. 


Standard-Labeled Tape Protection 


The OpenVMS tape file system bases its accessibility protection on the ISO 
standards. This protection allows an installation routine to use a routine that 
interprets the contents of the volume- and header-label accessibility field. See the 
$MTACCESS system service in the OpenVMS System Services Reference Manual 
for more information on installation routines. 


Access Types with Default Protection 


When you do not supply a protection code during initialization, all users receive 
read and write access, explained in Table 8-11. 


Table 8-11 Access Types for Tape Volume Protection 
Access Type Description 


Read Gives you the right to examine, print, or copy files from the volume. 


Write Gives you the right to append or write files to the volume. 


The security profile of a tape volume is stored in the tape volume 1 and volume 2 
labels. Volume 2 contains system-specific information, which is not written if you 
specify the /INTERCHANGE qualifier. 


Foreign Volume Protection 


The operating system also supports foreign tape volumes. (Foreign volumes 
either lack the standard volume label or have been mounted /FOREIGN.) When 
a tape volume is mounted with the /FOREIGN qualifier, users in the system and 
owner categories are always given full access (read, write, logical, and physical), 
regardless of what is specified in the protection code. 


8.4.2.1 Using the /PROTECTION Qualifier with Tape Volumes 
If you use the /PROTECTION qualifier when you initialize tape volumes, the 
protection code is written to a system-specific volume label. 


With the /PROTECTION qualifier, the system applies only read (R) and write (W) 
access restrictions. (Execute [EK] and delete [D] access do not apply.) The system 
and the owner always receive both read (R) and write (W) access to magnetic 
tapes, regardless of the protection code you specify. 
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8.4.2.2 Protecting Tape Volumes for Interchange Environments 


You can protect tape volumes for interchange between OpenVMS and other 
operating systems. 


Following are guidelines for protecting specific types of magnetic tapes: 


e With tapes processed on any operating system that supports a version of 
the ANSI standard later than Version 3, the system processes accessibility 
information in the first volume label. 


¢ Tapes processed on operating systems other than VMS VAX Version 4.0 or 
later have protection characteristics encoded in the first volume label of the 
tape volume. 


¢ To process magnetic tapes created on a Digital operating system other than 
the OpenVMS operating system, a user must have VOLPRO privilege and 
must explicitly override the check on the protection as follows: 


— Ifthe tape was created with a specified accessibility, then a user must 
have the appropriate privilege and must explicitly override the check on 
accessibility. 


— Ifthe tape volume was not created with such a protection scheme, then a 
user is granted read and write access to that tape volume. 


¢ The tape file system allows you to specify values for the fields in which 
other Digital operating systems currently write their protection information. 
Except under conditions described in the two previous sections, the OpenVMS 
operating system does not process these fields. Thus, you can use these fields 
to store the protection values for another operating system without affecting 
the system protection characteristics on that particular volume. 


8.4.3 Auditing Volume Access (VAX Only) 


<i> 


On VAX systems, you can enable auditing for the volume object class; the system 
then audits disk volume access, with the following exceptions: 


° The system does not audit volume creation or deletion. 


e The system does not audit access for tapes, ODS-1, or foreign mounted 
volumes. ¢ 


8.5 Mounting Volumes 
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Mounting a disk or tape volume establishes a relationship between the volume 
and the device on which the volume is physically loaded. After you mount 

a volume, the system knows it exists, and users can access it. (This section 
assumes that you are performing the mount operation yourself.) 


File-Structured and Foreign Volumes 


Ordinarily, when you mount volumes, the system imposes a format on each 
volume that allows you to read, write, create (or execute), and delete files. These 
mounted volumes have the format of the OpenVMS operating system. 


If you specify the /FOREIGN qualifier when you mount a volume, the system does 
not impose a format on the media, and you cannot access the files on the mounted 
volume. You would use the /FOREIGN qualifier if you were mounting volumes 
with formats of non-OpenVMS operating systems or with private formats. 
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Because foreign volumes are not file-structured, you must access them as follows: 
¢ Disks—sequentially or by logical block number 
e Tapes—sequentially 


At times, the Backup utility requires that you mount volumes with the 
/FOREIGN qualifier, when you restore an entire disk, for example. For details, 
see the OpenVMS System Management Utilities Reference Manual. 


Steps for Mounting Volumes 
When mounting volumes, follow these steps: 


1. Physically mount all disks and put them on line. 


2. Enter the MOUNT command (which invokes the Mount utility), including the 
device name and volume identifier. (Specifying a logical name is optional.) 


Once invoked, the Mount utility does the following: 
a. Allocates the device 

b. Checks to see that the device is correctly loaded 
c. Reads and verifies the volume identification 


How to Perform This Task 
Enter the MOUNT command using the following format: 


MOUNT device-name volume-label logical-name 


where: 

device-name Specifies the physical device name or logical name of the device on 
which the volume is to be mounted. 

volume-label Specifies the label on the volume. 

logical-name Defines a logical name to be associated with the device. 


Under special conditions, you need to add qualifiers to the MOUNT command; for 
example: 


¢ To mount a public volume, include the /SYSTEM qualifier with the DCL 
command MOUNT using the following format: 


MOUNT/SYSTEM device-name volume-label logical-name 
° Ina VMScluster environment, also specify the /CLUSTER qualifier: 
MOUNT/SYSTEM/CLUSTER device-name volume-label logical-name 


Table 8-12 and Table 8-13 show, respectively, the qualifiers you can use when 
you mount disks and tapes. 


The following sections explain how to perform these operations: 


Operation For More Information 
Use MOUNT command qualifiers when you mount disks Section 8.5.1 
Use MOUNT command qualifiers when you mount tapes Section 8.5.2 
Assist users with mounting Section 8.5.3 
Modify disk volume characteristics Section 8.5.5 
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8.5.1 Using MOUNT Command Qualifiers When You Mount Disks 


Table 8-12 shows some of the qualifiers you can use with the MOUNT command 
when you mount disks. The OpenVMS System Management Utilities Reference 
Manual contains more information about each qualifier. 


Table 8-12 MOUNT Command Qualifiers for Mounting Disks 


Qualifier 


/ACCESSED=n device- 
name 


/ASSIST device-name 


/BIND=volume-set-name 
device-name volume-label 


/CACHE=keyword 


/CLUSTER device-name 


/COMMENT="string” 
device-name 
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Description 


Requires OPER privilege; specifies the approximate number 
of directories that will be in use concurrently on the volume. 
(This qualifier is obsolete for ODS-2.) For example, on a large 
500 megabyte (MB) disk you might select a value of 40, but 
on a small disk you might specify the following: 


$ MOUNT/ACCESSED=2 DUA3: 


Directs the mount operation to allow operator or user 
intervention if the mount request fails. The /ASSIST qualifier 
is the default except during system startup. Encourage users 
to take advantage of this feature, which repeatedly alerts the 
operator of a mount request until the request is satisfied. 


To disable operator-assisted mounts, enter a command like 
the following: 


$ MOUNT/SYSTEM/NOASSIST DUA1: SALES 93 


Creates a volume set of one or more disk volumes or adds one 
or more volumes to an existing volume set. For example: 


$ MOUNT/SYSTEM/BIND=CLIENTS DUA0: ,DUA1: EUROPE, ASIA 
See Section 8.6.1.2 for details. 


Controls whether caching limits established at system 
generation are disabled or overridden. For example: 


$ MOUNT/CACHE=(EXTENT=60,FILE ID=60,QUOTA=20) - 
$ DMAO: FILES WORK a 

$MOUNT-I- 

MOUNTED, FILES mounted on NODESDMAO: 


This command mounts an RKO7 device labeled FILES and 
assigns the logical name WORK. The /CACHE qualifier 
enables an extent cache of 60 entries, a file identification 
cache of 60 entries, and a quota cache of 20 entries. 


Requires SYSNAM privilege; specifies that after a volume 
is successfully mounted on the local node, or if it is already 
mounted with the /SYSTEM qualifier on the local node, 

it is to be mounted on every other node in the existing 
VMScluster environment (that is, the volume is to be 
mounted clusterwide). For example: 


$ MOUNT/SYSTEM/CLUSTER DUA1: SALES 93 


Specifies additional information to be included with the 
operator request when the mount operation requires operator 
assistance. For example: 


$ MOUNT/SYSTEM DYA1: SALES 93/COMMENT="Vol. in Rack 2." 


(continued on next page) 
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Table 8-12 (Cont.) MOUNT Command Qualifiers for Mounting Disks 


Qualifier 


/EXTENSIONE=n device- 
name 


/FOREIGN device-name 


/MEDIA_ 
FORMAT=CD-ROM 


ANOJMOUNT_ 
VERIFICATION device- 


name 


/OVERRIDE=keyword 


/PROTECTION=keyword 


/SHARE device-name 


{VAX specific 


Description 


Requires OPER privilege; specifies the number of blocks by 
which disk files are to be extended on the volume unless 
otherwise specified by an individual command or program 
request. The cluster size sets the initial disk block allocation; 
the /EXTENSION qualifier determines how the file grows. 
For example, for a small disk with a cluster size of 1 disk 
block, you might select an extension size of 2 disk blocks: 


$ MOUNT/EXTENSION=2 DUA3: 


Indicates that the volume is not in the standard format 
used by the operating system. Use this qualifier if you want 
to mount a disk volume with a file structure other than 
Files—11 or ISO 9660; for example (using DISK as a logical 
name): 


$ MOUNT/FOREIGN DISK 


Mounts a volume assuming the media to be ISO 9660 (or 
High Sierra) formatted. 


Enables or disables the mount verification feature on disks. 
By default, the mount verification feature is enabled. 

If a device goes off line or becomes write-locked, mount 
verification notifies the operator of the error condition, and 
then checks to see that the volume identification before and 
after the error condition are identical. 


To disable mount verification, enter a command like the 
following: 
$ MOUNT/SYSTEM/ NOMOUNT VERIFICATION DUAI: ACCOUNTS DUE 


Inhibits one or more protection checks that the MOUNT 
command performs. 


Specifies the protection code to be assigned to the volume. 
Keywords are the following: 


¢ Protection code: specifies the protection code according to 
the standard syntax rules for specifying user protection 
(that is, system/owner/group/world). 


e  +XAR: on VAX systems, enables enforcement of the 
extended record attribute (XAR) access controls. 


e +DSI: on VAX systems, enables XAR permissions owner 
and group for XARs containing Digital System Identifiers 
(DSD. 


See Section 8.4.1 for details. 


Specifies that other users can access the volume. (However, 
you need to mount public volumes with the /SYSTEM 
qualifier.) Two users can access a private volume 
simultaneously if they both mount it with the /SHARE 
qualifier. Use /SHARE in the following way: 


$ MOUNT/SHARE DLAQ: COST ACCOUNT 


(continued on next page) 
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Table 8-12 (Cont.) MOUNT Command Qualifiers for Mounting Disks 


Qualifier 
+/SUBSYSTEM 


/SYSTEM device-name 


t/UNDEFINED_FAT 


/WINDOWS=n device- 


name 


VAX specific 


Description 


On VAX systems, enables the processing of subsystem 
ACEs. (The command MOUNT/SUBSYSTEM requires the 
SECURITY privilege.) By default, the disk from which 

you boot has /SUBSYSTEM enabled but other disks do 

not. The following command uses the MOUNT command 
with the /SUBSYSTEM qualifier to enable the processing of 
subsystem ACEs on the DUAO: device (DOC is the volume 
label; WORKS8 is the volume logical): 


$ MOUNT/SUBSYSTEM/SYSTEM DUA0: DOC WORK8 


Requires SYSNAM privilege; makes the volume public, that 
is, available to all users of the system, as long as the UIC- 
based volume protection allows them access. The following 
command mounts the volume labeled WORK and makes it 
available systemwide: 


$ MOUNT/SYSTEM DUA1: WORK 


On VAX systems, establishes default file attributes to be used 
for records on ISO 9660 media for which no record format 
has been specified. 


Requires OPER privilege; specifies the number of mapping 
pointers to be allocated for file windows. The default number 
of windows is set with the INITIALIZE command. The 
following example specifies a modest number of pointers: 


$ MOUNT/WINDOWS=4 DUA3: 


8.5.2 Using MOUNT Command Qualifiers When You Mount Tapes 


Table 8—13 describes some of the command qualifiers you can use when mounting 
a tape volume. For a complete list of all the command qualifiers supported for 
the mounting of tape volumes, see the OpenVMS System Management Utilities 
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Reference Manual. 


Unless otherwise noted, you must have VOLPRO privilege to use any of these 
qualifiers when the volume is a standard-labeled volume containing protection 
that disallows your process from accessing the volume. 


Table 8-13 MOUNT Command Qualifiers for Mounting Tapes 


Qualifier 


/BLOCKSIZE=n 


Description 


Specifies the block size for the magnetic tape. The range of 
valid values for n varies, depending on the density of the 
volume, whether the data is for input or output, and whether 
the operation uses OpenVMS RMS. By default, the system 
writes 2048-byte blocks. 


(continued on next page) 
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Table 8-13 (Cont.) MOUNT Command Qualifiers for Mounting Tapes 


Qualifier 


/CACHE=TAPE_DATA 


/FOREIGN device-name 


/HDR3 device-name 


/INOJMOUNT_ 
VERIFICATION device- 


name 


/OVERRIDE=keyword 


/OWNER_UIC=uic 
device-name 


/PROCESSOR=keyword 


/PROTECTION=code 
device-name 


/RECORDSIZE=n 
device-name 


Description 


Requires OPER privilege; enables the write cache for a tape 
device if the tape controller supports one. /NOCACHE is the 
default for mounting tape devices. 


You must specify TAPE_DATA to enable write caching. The 
write buffer stays enabled even after you dismount the tape. 


Indicates that the volume is not in the standard format used 
by the operating system. 


Controls whether special header labels are written on a tape 
volume. The default is /HDR3, which allows header labels to 
be written on a volume. 


Enables or disables the mount verification feature on magnetic 
tapes. By default, the mount verification feature is enabled. 
If a device goes off line or becomes write-locked, mount 
verification notifies the operator of the error condition, and 
then checks to see that the volume identification before and 
after the error condition are identical. 


To disable mount verification, enter a command like the 
following: 


$ MOUNT/SYSTEM/NOMOUNT_VERIFICATION MUA1: ACCOUNTS DUE 


Inhibits one or more of the access checks that the MOUNT 
command performs. For example: 


$ MOUNT/OVERRIDE=IDENTIFICATION MFAO: 


This command overrides the volume identification field, 
thus mounting a magnetic tape on MFAO: without a label 
specification. 


Requests that the specified UIC be assigned ownership of the 
volume while it is mounted, overriding the ownership recorded 
on the volume. Or, if you are mounting a volume using the 
/FOREIGN qualifier, requests an owner UIC other than your 
current UIC. 


For magnetic tapes and Files—11 Structure Level 1 

disks, requests that the MOUNT command associate an 
ancillary control process (ACP) to process the volume. The 
/PROCESSOR qualifier causes MOUNT to override the default 
manner in which ACPs are associated with devices. For 
example: 


$ MOUNT/PROCESSOR=SAME:MTA1: MFAO: 


This command directs MOUNT to mount a magnetic tape on 
MFAO: using the same ACP process currently associated with 
the MTA1: device. 


Specifies the protection code to be assigned to the volume for 
the duration of the mount. See Section 8.4.2 for details. 


Specifies the number of characters in each record of a magnetic 
tape volume. Use this qualifier when you mount a volume 
that has a file without a second header label (such as RT-11 
volumes), or when you mount volumes with the /FOREIGN 
qualifier, to provide OpenVMS RMS with the size of fixed- 
length records or the maximum size of variable-length records. 


Two other qualifiers that are important for mounting tape volumes are 
AINITIALIZE and /AUTOMATIC, which are explained in Section 8.8.2.2 and 
Section 8.8.2.3, respectively. 
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Example 


$ MOUNT MU: TEST FILES 
%MOUNT-I-OPRQST, Please mount volume TEST FILES in device MUA2: 
SMOUNT-I-MOUNTED, TEST FILES mounted on MUA2: 


In this example, the MOUNT command requests an available RA90 device for 
the volume labeled TEST_FILES. After you physically mount the volume in the 
device named in the response from MOUNT, the system completes the operation. 
Note that the device is automatically allocated by MOUNT. 


Upon successful completion of the operation, MOUNT notifies you with a message 
sent to SYS$OUTPUT. If the operation fails for any reason, MOUNT notifies you 
with an error message. 


8.5.3 Assisting Users in Mounting Volumes 
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Large sites often have operators assigned to assist users with mounting volumes. 
Section 2.4.5 explains how users can send requests to operators. Section 2.4.6 
briefly explains how operators reply to those requests. 


When a user requests you to mount a specific disk or tape on a device, the 
following type of message appears on the operator terminal: 


$$%$S3S3S3% OPCOM <ddsmmm:yyyy:hh:mm:ss:cc> %%%%%%%%3%% 
request <request-id>, from user <user-name> 


The following steps indicate the sequence of events: 


1. A user requests that you mount the volume TEST_FILES on the device 
DUA2: by entering the following command: 


$ MOUNT DUA2: TEST FILES/COMMENT="Shelf slot 6B" 


2. OPCOM notifies you of the request by displaying a message similar to the 
following at the operator terminal: 


SESSSEEESBB  OPCOM, 28-DEC-1993 15:47:350.26 %%3%3%33333% 
request 5, from user MALCOLM 

Please mount volume TEST FILES in device DUA2: 

Shelf slot 6B ~ 


3. Once you receive the request, OPCOM delivers a confirmation to the user, in 
a format similar to the following: 


SMOUNT-I-OPRQST, Please mount volume TEST FILES in device DUA2: 
Shelf slot 6B 


4. After you locate the volume and place it on the device, OPCOM notifies the 
user that the volume is on the device and that the task is complete: 


$MOUNT-I-MOUNTED, TEST FILES mounted on DUA2: 
SMOUNT-I-ROSTDON, operator request canceled 
-- mount completed successfully. 


Instead of requesting a specific hardware device, such as DUA2:, for mounting a 
volume, users can make a generic MOUNT request. A generic MOUNT request 
specifies a type of device and lets you find an available device in that class. For 
example, to mount the volume CITIES on any tape drive whose name begins with 
MU, the user enters the following command: 


$ MOUNT MU: CITIES/COMMENT="Slot 12c" 


Managing Storage Media 
8.5 Mounting Volumes 


If the user has already allocated a drive whose name begins with MU, the Mount 
utility requests that you mount CITIES on that particular drive. If no device has 
been allocated, the Mount utility allocates the first available MU tape drive it 
finds and requests you to mount CITIES on that drive. 


Sending Messages Back to Users 

After you mount a disk or tape, follow these steps: 

1. Use the Operator Communication Manager (OPCOM) to communicate with 
system users. OPCOM is a system process that receives input from a process 


that wants to inform an operator of a particular status or condition; OPCOM 
passes the message to the operator, and tracks the message. 


To use OPCOM, you must use a terminal that has been designated as an 
operator terminal. See Section 2.4.4 for instructions. 


2. Enter the REPLY command in one of the following forms: 


REPLY Command Qualifiers Use 

/ABORT=identification-number Use to indicate that the user request is canceled. 

“message-text” (The user’s MOUNT command exits with an error 
status.) 

/PENDING=identification- Use when the request has been put in a wait 

number “message-text” state until it can be completed. This command 


implies that the originating request was either 
a REQUEST/REPLY or a MOUNT command. 
The user cannot enter other commands until the 
operator fulfills or aborts the request. 


/TO=identification-number Use when the request is fulfilled. (Processing 
“message-text” continues.) 


If a user enters a MOUNT/ASSIST command and the desired device is 
unavailable, you can substitute another device. Whenever you must 
substitute a device, load the requested volume on the alternate device and 
prepare the device for connection before you enter the REPLY command. Use 
the following format: 


REPLY/TO=identification-number “SUBSTITUTE device-name” 


You can abbreviate the word SUBSTITUTE to “S” and use uppercase or 
lowercase characters. After a space, use the remainder of the message-text 
space to name the substituted device. 


Examples 

The following example shows how an operator redirects the mount operation 
from the DUB2: device to the DUAI1: device: 

$ REPLY/TO=24 "SUBSTITUTE DUA1: FOR DUB2:" 


Following is an example of a user’s request and the substitution information 
the user receives: 

$ MOUNT/ASSIST MKB500: MYDATA 

$MOUNT-I-OPRQST, Please mount volume MYDATA in device MKB500: 
$MOUNT-I-OPREPLY, Substitute MKA100: 

11:44:28.71, request 1 was completed by operator FTA8: 

In this example, the MKA100: device has been substituted for the MKB500: 
device. 
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See the OpenVMS DCL Dictionary for a complete list of REPLY qualifiers and 
their functions. See Section 8.8 for instructions for entering REPLY commands 
after you mount a volume set with automatic switching disabled. 


8.5.4 Mounting a Volume with Protected Subsystems (VAX Only) 


<i> 
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On VAX systems, security is usually based on privileges that are granted or 
denied to the user. In a protected subsystem, however, security is based on access 
controls assigned to the subsystem. The subsystem acts as a gatekeeper that 
grants or denies users access to objects belonging to the subsystem. 


Unprivileged users can build and manage protected subsystems. You need to be 
involved at two points in the process: 


e To create the necessary identifiers for the subsystem. See the OpenVMS VAX 
Guide to System Security for details. 


¢ To mount the volume with the protected subsystem, which is explained in the 
next section. 


Caution 


Anyone who mounts a subsystem is responsible for knowing what is 
on the volume being mounted. Digital strongly recommends that you 
find out what is on a volume before you mount a subsystem. Without 
this knowledge, you might inadvertently subvert system security and 
jeopardize the privacy of users’ data. 


For example, a user with malicious intent who has privileges on one 
VMScluster node might place an application with a subsystem identifier 
on a volume and then request an unsuspecting operator or system 
manager to mount the volume on another node. Because the application 
has a subsystem identifier, the application appears to belong to a 
subsystem for which it is unauthorized. 


Enabling Protected Subsystems on a Trusted Volume 

The system enables protected subsystems by default only on the system disk. 
For other disks, you need to enable subsystems every time you mount a volume. 
A person with the SECURITY privilege can enable subsystems on a volume by 
using the /SUBSYSTEM qualifier on the MOUNT command. 


You can dynamically turn on and off the processing of Subsystem ACEs with the 
DCL command SET VOLUME/SUBSYSTEM. This command is especially useful 
for the system disk, which is not mounted using the MOUNT command. 


Example 


The command in the following example mounts the volume labeled DOC on the 
DUAO: device. Subsystems on the volume are accessible. The MOUNT command 
also assigns the logical name WORK8. 


$ MOUNT/SUBSYSTEM/SYSTEM DUA0: DOC WORK8 ¢ 
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8.5.5 Modifying Disk Volume Characteristics 


Use the DCL command SET VOLUME to modify the characteristics of one or 
more mounted Files—11 disk volumes. To use this command, you must have write 
access to the index file on the volume. If you are not the owner of the volume, 
you must have either a system UIC or the user privilege SYSPRV. You must then 
specify the name of one or more mounted Files—11 volumes. 


The following examples illustrate how you can use the SET VOLUME command. 
Examples 
1. §$ SET VOLUME/DATA_CHECK=(READ , WRITE) DKA100 
This command requests that data checks be performed following all read and 
write operations to the DKA100: volumes. 
2. $ SET VOLUME/LABEL=LICENSES DKA100: 


This command encodes the label LICENSES on the DKA100: volume. Note 
that, if characters in labels are entered in lowercase, the /LABEL qualifier 
changes them to uppercase. 


8.6 Setting Up Disk Volume Sets 


The following sections discuss concepts related to disk volume sets and explain 
how to do the following: 


Task For More Information 
Create a disk volume set from new volumes Section 8.6.2 
Create a disk volume set from an existing volume Section 8.6.3 
Add volumes to a disk volume set Section 8.6.4 


8.6.1 Understanding Disk Volume Sets 


A volume set is a collection of disk volumes bound into a single entity by the 
DCL command MOUNTYBIND. To users, a volume set looks like a single, large 
volume. Volume sets have the following characteristics: 


¢ Files are automatically allocated anywhere on the volume set that space is 
available. 


¢ Disk quotas are enforced over the entire set. 
e A single directory structure covers the whole volume set. 


Use a volume set to provide a large, homogeneous public file space. You must use 
a volume set to create files that are larger than a single physical disk volume. 
(The file system attempts to balance the load on the volume sets, for example, by 
creating new files on the volume that is the least full at the time.) 


If you want several distinct areas of file storage, with different types of users or 
different management policies, you must use a separate volume or volume set for 
each area. For example, you might want one volume for permanent user storage, 
with limited disk quotas and regular backups. You might want another volume 
for “scratch” use, which means that the volume has liberal or no quotas and is 
not backed up; also, its files are purged on a periodic basis. Each separate volume 
or volume set must contain a top-level user file directory for each user who keeps 
files on that volume. 
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An advantage of separate volumes is their modularity. If one of the drives holding 
a volume set is out of service, the whole volume set is unavailable because of its 
interconnected directory structure. When a drive holding a single volume is not 
functioning, only the files on that volume are not available. 


A disadvantage of volume sets is the large size of an image backup of a 
multivolume set, which might affect your backup schedule. For example, if 
backing up each of five separate volumes takes 5 hours in the evening, backing 
up these same volumes in a volume set will take 25 hours, which cannot be done 
overnight, thus possibly causing a scheduling problem. 


8.6.1.1 Guidelines for Creating Disk Volume Sets 
When planning disk volume sets, keep in mind the following: 


e You can turn any single volume into a volume set by binding it with a newly 
initialized volume. Likewise, you can add another newly initialized volume to 
an existing volume set. 


¢ Do not include a system disk in a volume set. 


Caution 


Do not make the system disk part of a volume set because updates, 
upgrades, and optional product installations do not install correctly, and 
the operating system will no longer boot successfully. 


¢ You cannot bind two existing separate volumes containing files into a volume 
set. (The MOUNT command appears to let you do this, but the result is not a 
coherent volume set.) 


e Enter the MOUNT/BIND command only once to bind a volume set; thereafter, 
the volume set association is recorded on the volumes. (See Section 8.5 for 
details.) 


e Once you bind two or more volumes into a volume set, you cannot separate 
them. The only way to separate a volume set is to use the Backup utility 
(BACKUP) to copy sets of directories selectively. (See Section 10.13 for more 
information.) 


When you mount a disk volume set, the volume label specified in the list must 
correspond to a device name in the same position in the device name list. 


You can bind two or more disk volumes into a volume set. The first volume in the 
set is called the root volume. Each volume in the set is identified by a volume 
number relative to the root volume, which is always relative to volume 1. 


A disk volume set has a single directory structure. The master file directory 
(MFD) is on the first volume in the set. 


When a disk volume set is on line and mounted, you can access all files and 
directories in the set by specifying either of the following: 


e Device name of the device on which the root volume is mounted 


¢ Logical name assigned to the volume set when it was mounted 
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8.6.1.2 Using the /BIND Qualifier 


You use the /BIND qualifier with the MOUNT command to create a disk volume 
set in the following format: 


MOUNT/BIND=volume-set-name 
where: 


volume-set-name Specifies a 1- through 12-alphanumeric-character name identifying the 
volume set. 


The volume set name must be different from all volume labels within the set, and 
all labels in the set must be unique. 


When you use /BIND, the qualifier identifies a volume set by assigning it a 
volume set name that applies to all volumes in the set. The qualifier also 
identifies the root volume and creates the directory structure for the volume. 


When you create files on a volume set, the file system allocates space for the files 
anywhere on the set, wherever the most space exists. When existing files on any 
volume are extended, extension occurs on the same volume, unless the volume is 
physically full. 


You can add new volumes to a volume set whenever additional space is needed. 
You can, for example, bind all disk volumes that are mounted into a volume set 
on a daily basis. Since this set contains all user file directories, users do not need 
to specify device names in file specifications to access files on any volume in the 
volume set. In fact, the physical location of a file is of no concern to users of the 
system. 


Note 


Do not bind your system disk into a volume set. System software updates 
and optional product installations do not support volume sets. If certain 
system files move or extend to other volumes in the set, the system might 
fail to boot. 


You do not need special privileges to create volume sets. However, you must have 
write access to the index file on all volumes you are attempting to bind into a 
volume set; this usually means you also must have a system UIC, have the user 
privilege SYSPRYV, or be the owner of the volumes. 


You can create a disk volume set from newly initialized volumes, or you can create 
a volume set by extending an existing volume that already contains a directory 
structure and files. You can also add volumes to an existing volume set. The next 
three sections contain examples of how to create and mount each type of disk 
volume set. 


8.6.2 Creating a Disk Volume Set from New Volumes 
To create a disk volume set from new disk volumes, follow these steps: 
1. Allocate the necessary devices and physically load the volumes. 
2. Initialize each volume in the set. 


When you initialize volumes for a volume set, you can use qualifiers with 
the INITIALIZE command to define the volume ownership and protection. 
Protection and ownership information is obtained from the root (first) volume. 
The protection and ownership of the other volumes is ignored. 
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3. Enter the MOUNT/BIND command to create the volume set. The MOUNT 


/BIND command both creates the volume set and mounts the volumes. When 
this command completes successfully, all volumes in the set are ready for use; 
in other words, you can now create user file directories. 


Use the /BIND qualifier only once to create the volume set. Subsequently, you 
can mount the volume set with a single MOUNT command. 


Examples 


1. 


$ INITIALIZE DUA1: PAYVOL1 
$ INITIALIZE DUA2: PAYVOL2 
$ INITIALIZE DUA3: PAYVOL3 
$ MOUNT/BIND=MASTER_PAY DUA1:, DUA2:, DUA3: PAYVOL1,PAYVOL2,PAYVOL3 


This example assumes that the volumes to be bound contain no files or data. 
The INITIALIZE command initializes each volume in the set. The MOUNT 
/BIND command defines the volume set name, MASTER_PAY, and defines the 
relative volume numbers of the volumes PAYVOL1, PAYVOL2, and PAYVOL3. 


The order of the device names corresponds to the volume labels specified: 
PAYVOL1 must be physically loaded on DUA1:, PAYVOL2 on DUA2:, and 
PAYVOL3 on the DUAS: device. 


PAYVOL1, which is listed first in the list of labels, becomes the root volume of 
the set. The master file directory (MFD) for PAYVOL1 contains the directory 
structure for the entire volume set. 


$ MOUNT DUA1:,DUA2:,DUA3: PAYVOL1,PAYVOL2,PAYVOL3 


This example illustrates the use of one MOUNT command to mount a 
previously created volume set. 


8.6.3 Creating a Disk Volume Set from an Existing Volume 


To create a disk volume set from an existing volume, follow these steps: 


1. Use the DISMOUNT command to dismount the existing volume. Use the 
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/NOUNLOAD qualifier to logically dismount the volume from the drive; 
however, the volume remains physically loaded on the drive. 


Use the INITIALIZE command to initialize the new volume, specifying the 
device on which the volume is to be mounted and the volume label. 


Use the MOUNT/BIND command to bind the new volume to the existing 
volume, specifying the volume set name, the devices on which the volumes 
are mounted, and the volume labels. 


Specify the volume label of the existing volume first; it becomes the root 
volume of the set. When you create a volume set from an existing volume, 
you must specify the label of the existing volume first because the file system 
must build on the existing directory structure. 


Example 


The following example shows how to create a disk volume set from an existing 
volume. The example assumes that the volume USERFILES already contains 
a directory structure and files and that the volume is currently located on the 
DUAI: device: 


$ DISMOUNT/NOUNLOAD DUAI1: 
$ INITIALIZE DUA2: USERFILES2 
$ MOUNT/BIND=USERS DUA1:, DUA2: USERFILES, USERFILES2 
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In the MOUNT/BIND command, you must specify the existing volume label 
USERFILES before the volume label USERFILES2. USERFILES will be the root 
volume of the set. 


Caution 


If you attempt to create a volume set from two or more volumes that 
already contain files and data, the file system does not issue an error 
message when you enter the MOUNT/BIND command. However, the 
volumes are unusable as a volume set because the directory structures 
are not properly bound. 


8.6.4 Adding Volumes to an Existing Disk Volume Set 


You can add volumes to an existing volume set at any time. The maximum 
number of volumes in a volume set is 255. 


This section contains examples that show how to add volumes to an existing 
volume set. 


Examples 


1. 


$ INITIALIZE DUA4: PAYVOL4 
$ MOUNT/BIND=MASTER PAY DUA4: PAYVOL4 


This example assumes that the volume set named MASTER_PAY is on line 
and mounted and has volumes named PAYVOL1, PAYVOL2, and PAYVOL3. 


The MOUNT/BIND command binds the volume PAYVOL4 with the existing 
volume set and makes the volume ready and available for use. Note that, if 
the volume set MASTER_PAY is mounted with the /SYSTEM, /GROUP, or 
/SHARE qualifier, the MOUNT/BIND command that adds a volume to the set 
must also specify the appropriate qualifier. 


When you add a volume to an existing set, the only volume in the set that 
you must mount is the root (first) volume, relative volume 1 (in this example, 
DUA4:). You do not need to mount any of the other volumes. 


$ INITIALIZE DUA4: PAYVOL4 
$ MOUNT/BIND=MASTER PAY DUAL:, DUA2:, DUA3:, DUA4: - 
_$ PAYVOL1, PAYVOL2, PAYVOL3, PAYVOL4/SYSTEM 


This example assumes a set named MASTER_PAY already exists, with 
volumes named PAYVOL1, PAYVOL2, and PAYVOL3. 


You can add a volume to a set at the same time that you mount the volume 
set, as this example shows. Note that the first device/volume pair listed in 
the MOUNT/BIND command is the root (first) volume of the set, the DUAI: 
volume. When you add a volume to a set while mounting the set, you must 
list the root volume first. 


8.7 Mounting ISO 9660 Volume Sets and Groups 


To access an ISO 9660-formatted CD-ROM, you can mount disk volumes in two 
ways: 


Directly, using the Mount utility 
Indirectly, using the DCL command MOUNT 
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The Mount utility builds the I/O database structures that are needed to 

access ISO 9660 directories and files. MOUNT also verifies the presence of an 
appropriate ACP to perform $QIO functions specific to ISO 9660. Currently, you 
cannot mount ISO 9660 media as a system disk. 


See the OpenVMS System Management Utilities Reference Manual for details. 


8.7.1 Mounting ISO 9660 Volume Sets 


ISO 9660 supports volume sets of up to 65,535 volume set members. At any one 
time, users can mount a 255-member subset of the total volume set of 65,535. 


If your volume set is greater than the number of CD-ROM readers available to 
you, you can swap volume set members, for example, as you might when you 
have a single reader with multiple volume set members. 


8.7.2 Mounting !SO 9660 Volume Groups 


A volume group consists of one or more consecutively numbered volumes within 
a volume set. Affinity between the members of a volume group is established 
by the fact that the volumes are recorded together and are subject to the same 
maximum-volume-set-size parameter. 


Each volume in a volume group contains information describing all the files 
and directories recorded on all of the volumes in the volume set, up to and 
including the members of its volume group. For example, assume that a volume 
set includes two volume groups: 


e The first group includes Volumes 1 and 2, which were recorded together, prior 
to the second group. 


Volumes 1 and 2 each contain information only about their volume group; 
they have no information about the volumes in the second volume group. 


e The second group includes Volumes 3, 4, and 5, which were recorded together 
at a later date. 


Volumes 3, 4, and 5 each contain information about all of the volumes in the 
volume set, including Volumes 1 and 2. 


How to Perform This Task 


When you mount a volume set, you must first mount a member of the highest- 
numbered volume group (the most recently recorded group—in the example, 
Volume 3, 4, or 5), because only a member of the highest-numbered group has the 
information needed to mount all members of the volume set. 


If you do not follow this requirement, you must dismount all of the volumes and 
start again by specifying a member of the highest-numbered volume group as the 
first volume to be mounted. 


8.7.3 Handling Partially Mounted ISO 9660 Volume Sets 
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OpenVMS systems support partially mounted ISO 9660 volume sets. Data is 
usually read from all mounted volumes in a manner that is transparent to the 
user program. 


When a volume-set member is not mounted because the volume set is partially 
mounted, OPCOM sends a message to the OPERATOR class DISK requesting 
that the unmounted volume be mounted. If you do not honor the request within a 
specified time period, or if you do not enable the option to provide for dynamically 
mounting a volume, the I/O process fails, and an error message is issued. 
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8.8 Mounting Tape Volume Sets 


The procedure for mounting a tape volume set is similar to the procedure for 
mounting a single tape volume, described in Section 8.5. The number of volume 
identifiers does not need to equal the number of device names you specify. In 
other words, when you mount a tape volume set, you can specify more volume 
identifiers than device names or more device names than volumes. 


The number of devices you specify directly affects the action taken by the tape 
file system when processing continuation volumes in a volume set. For example, 
when the number of devices is greater than the number of volumes, the tape files 
system requests a continuation volume to be mounted on the first drive from the 
list that does not have a volume mounted. 


When mounting a volume set, make sure that all the volumes in the set contain 
write rings if the user intends to write to any of the volumes in the set. (If even 
one of the volumes in the set does not contain a write ring at mount time, all 
volumes are write-locked; the system is unable to write to any of them.) Load the 
volumes on the drives that have been allocated and place the drives on line. 


The following sections explain how to perform these tasks: 


Task For More Information 
Create a tape volume set Section 8.8.1 

Mount continuation volumes in a volume set Section 8.8.2 

Mount volume sets with automatic switching disabled Section 8.8.2.3 


8.8.1 Creating a Tape Volume Set 


If you do not create a volume set explicitly, the operating system creates one 
when necessary. If you have not mounted a volume set and a continuation 
volume is required, the tape file system requests that a continuation volume be 
mounted and implicitly creates a volume set. For example, if the tape file system 
encounters an EOT mark while writing a volume, it sends a message to the 
operator console requesting that another volume be mounted. 


After you mount the next volume, the tape file system writes the volume and 
header labels and then reissues the pending write requests to the continuation 
volume. The file-set identifier in the first file-header label of all files written 

to the continuation volume is the file-set identifier of the first file on the first 
volume. The file-set identifier for volume sets is always that of the first file of the 
first volume that is mounted in the set. 


How to Perform This Task 


To explicitly create a volume set with three volumes, for example, follow these 
steps: 


1. Allocate a drive on which you will load each volume. 


2. Initialize the volumes. Specify the density and the access protection in 
addition to the device name and the volume identifier in the INITIALIZE 
commands. 
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3. Mount the volumes. Include the device name and volume identifier. 
Specifying a logical name for the volume set is optional. The system not 
only confirms which volumes have been mounted, but also indicates on which 
drive each volume has been mounted. 
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The system mounts and verifies only the volumes that are physically loaded 
on the drives at mount time. However, the volume identifiers of additional 
volumes that you specify are not verified until the volumes are accessed. 


4. You can check the densities, volume labels, UICs, and relative volume 
numbers of the volumes that are mounted on drives. To do so, specify the 
SHOW DEVICES/FULL command. If you specify a generic device code for the 
tape drives, such as MU, information is displayed for all drives of that type 
configured in the system. 


To display information for a volume mounted on a specific drive, specify the 
physical device code, consisting of the generic device code, the controller 
designation, and the unit number followed by a colon. 


For more information on the SHOW DEVICES command, including examples 
of displays returned by the SHOW DEVICES/FULL command, see Section 7.2 
or the OpenVMS DCL Dictionary. 


Examples 


1. $ ALLOCATE MUAO: 
$DCL-I-ALLOC, _MARSSMUAQ: allocated 


$ ALLOCATE MUAI: 
$DCL-I-ALLOC, _MARS$MUA1: allocated 


$ ALLOCATE MUA2: 
$DCL-I-ALLOC, MARSSMUA2: allocated 


The commands in this example allocate a drive on which you will load each 
volume. 


2. $ INITIALIZE/DENSITY=1600/PROTECTION=(G:RW) MUAO: TAPE1 
$ INITIALIZE/DENSITY=1600/PROTECTION=(G:RW) MUA1: TAPE2 
$ INITIALIZE/DENSITY=1600/PROTECTION=(G:RW) MUA2: TAPE3 


The commands in this example initialize the volumes. The commands specify 
the density and the access protection in addition to the device name and the 
volume identifier. 


3. $ MOUNT MUAO:,MUA1:,MUA2: TAPE1,TAPE2,TAPE3 TEST 
$MOUNT-I-MOUNTED, TAPE] mounted on _MUAO: 
SMOUNT-I-MOUNTED, TAPE2 mounted on _MUAL: 
$MOUNT-I-MOUNTED, TAPE3 mounted on MUA2: 


The commands in this example mount the volumes. The commands include 
the device name and volume identifier. 


8.8.2 Mounting Continuation Volumes in a Tape Volume Set 


When mounting a tape volume set, follow the general procedures described in 
Section 8.8.1. Once you create the volume set, you do not need to initialize the 
volumes when you mount the volume set. 


You do not need to allocate a drive for each volume in the volume set. The 
tape file system requests that volumes be switched to appropriate drives when 
continuation volumes are required. 


The operating system stores, but cannot verify, the identifiers of volumes you 
specify but do not physically mount on drives at mount time. The system later 
verifies the volume identifiers when the volumes are accessed. 
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The operating system supports the continuous processing of mounted volumes 
in a tape volume set through automatic volume switching and automatic volume 
labeling (AVL). 


8.8.2.1 Creating Labels 
Depending on the following conditions, the file system does or does not create a 
label: 


e If the file system is writing to the volume set, it creates a label for the 
magnetic tape and initializes the tape with that label and the protection 
characteristics set for the first volume of the volume set. 


¢ Ifthe tape file system is reading the volume set, it tries to mount the next 
tape in the volume set with that label. 


e Ifthe drive has no tape loaded on it, or the wrong tape, the tape file system 
sends a message to the operator console notifying the operator either to mount 
a tape or to mount the correct tape. 


Before processing continuation volumes, the tape file system processes the 
protection on that volume (as described in Section 8.4.2). If the file system 
determines that the user does not have access to the volume, it sends a message 
to the operator. 


The label fills the six-character volume identifier field: 


¢ Characters 1 to 4 of the field contain the first four characters of the label 
specified for the previous volume in the volume set. (If the label is less than 
four characters, the volume identifier field is padded with underscores; for 
example, if the volume identifier is XXX, the padded field is XXX_.) 


e Characters 5 and 6 contain the relative volume number for that reel in the 
volume set. 


Note that the system can generate only 99 unique labels for a given volume set. 


With automatic volume switching enabled, the operator can load a tape on the 
next drive allocated to the tape volume set anytime before the volume being 
processed reaches the EOT mark. The tape file system mounts and initializes (if 
INITIALIZE was specified originally) the next tape in the volume set and then 
notifies the operator that the switch has occurred. 


8.8.2.2 Enabling Automatic Volume Switching 
. To use automatic volume switching, you must allocate more than one tape drive 
to your volume set. After you do so, the tape file system switches volumes for you 
automatically by selecting the next tape drive allocated to the volume set. The 
tape file system expects you to load the next volume in the volume set on that 
drive. 


Examples 
1. $ MOUNT MUAO:,MUA1:,MUA2: TAPE 


In this example, the volume with the identifier TAPE is mounted on the 
MUAO: drive. Load continuation volumes for this set on the tape drives in 
the following order: MUA1:, MUA2:, MUAO:, MUA1:, MUA2:, and so forth. 


8-37 - 


Managing Storage Media 
8.8 Mounting Tape Volume Sets 


2. $ INITIALIZE MUAO: MAIN 
$ MOUNT/OVERRIDE=IDENTIFICATION/INITIALIZE=CONTINUATION MUAO: ,MUA1: 


This example shows the use of the /INITIALIZE=CONTINUATION qualifier 
for mounting volume sets. It also shows how the system creates volume 
identifiers for continuation volumes. 


The volume labeled MAIN is mounted on the MUAO: drive. The second 
volume in the set receives the volume identifier MAINO2 and is mounted on 
the MUAI1: drive. The third volume in the set receives the volume identifier 
MAINO3 and is mounted on the MUAO: drive. 


To ensure that any volume added to the tape volume set is initialized prior to 
being written to, mount the volume with the /INITIALIZE=CONTINUATION 
qualifier. The default is /NOINITIALIZE. 


8. $ MOUNT MUA0:,MUA1: SUN 


In this example, the first volume in the set is labeled SUN and is mounted 
on the MUAO: drive. The second volume receives the identifier SUN_02 and 
is mounted on the MUAI: drive. The third volume receives the identifier 
SUN_03 and is mounted on the MUAO: drive. 


4, $ MOUNT MUAQ:,MUA1: SUN,MOON 


In this example, a continuation volume with two volume identifiers, SUN and 
MOON, is mounted on MUAO: and MUAL:, respectively. If a third volume 

is added to the set, it is given the identifier MOON03 and is mounted on the 
MUADO: drive. 


8.8.2.3 Disabling Automatic Switching 
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When a user is reading or writing to a magnetic tape and the tape reaches end- 
of-tape position, the system suspends processing and sends a request to mount 
the next tape in the volume set. For example: 


SESEEEEEEEE OPCOM, 28-DEC-1993 15:23:31.78 %%%%%3%333%% 
request 3, from user PLAW 
MOUNT new relative volume 2 (DW0QT2) on MUA1: 


The user does not see this message and might not realize that another tape is 
needed to complete the read or write operation. 


This section describes how to handle requests for mounting continuation volumes 
in a volume set when automatic volume switching is disabled or when the tape 
file system cannot mount a given volume. 


How to Perform This Task 
To explicitly override automatic volume switching, specify the /NOAUTOMATIC 
qualifier when mounting a tape volume. (The default is /AUTOMATIC.) 


If you allocate only one drive to the tape volume set, you implicitly disable 
automatic volume switching. 


Example 
$ MOUNT/NOAUTOMATIC MUA0: ABCD, EFGH 


The command in this example tells MOUNT not to supply its own label for the 
second volume but, instead, to use the ones specified in the MOUNT command. 
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8.8.2.4 Sending Messages Back to Users 


After loading the continuation volume on the drive specified in the mount 
request, mount the volume by entering the REPLY command with one of the 
three qualifiers shown in Table 8-14. 


Table 8-14 REPLY Command Qualifiers for Continuation Volumes 
Qualifier _ Description 


/BLANK_TAPE=n Use to write to an unformatted volume. This qualifier initializes the 
volume and requires the VOLPRO and OPER privileges to avoid a 
runaway tape or timeout condition (see Section 8.1.3.2). Either of 
the following REPLY commands is valid: 


$ REPLY/BLANK_TAPE=3 
$ REPLY/BLANK TAPE=3 "DWOQT2" 


The first command does not specify a volume identifier; the second 


does. 
AINITIALIZE_ Use for write operations if the volume identifier on the continuation 
TAPE=n volume does not match the one specified in the mount request. The 


file system reinitializes the tape and mounts the volume with the 
new volume identifier. The tape file system then performs access 
checks and initializes the volume as if the INITIALIZE command 
had been specified. Any data on the tape prior to specifying the 
/JINITIALIZE_TAPE command is lost. Either of the following 
REPLY commands is valid: 


$ REPLY/INITIALIZE TAPE=3 
$ REPLY/INITIALIZE TAPE=3 “DWO0QT2" 


The first command does not specify a volume identifier; the second 
does. 


/TO=request_id Use for both read and write copy operations. During a write 

[volume identifier] operation, use the /TO qualifier if you want the volume identifier 
specified in the mount request to be written on the continuation 
volume. 


For example, to respond to the mount request 3, mount volume 
DW0QT2 on drive MTA1: and enter one of the following commands: 


$ REPLY/TO=3 
$ REPLY/TO=3 "DWOQT2" 


The first REPLY command does not specify a volume identifier; the 
second does. 


Specifying the Volume Identifier 

Specifying the volume identifier in either the MOUNT command or the REPLY 
/TO command is essential during write operations because it ensures that the 
correct volume is mounted on the drive and links the continuation volume to the 
volume set. 


Omitting the Volume Identifier with the REPLY/TO Command 


During a write operation, you must omit the volume identifier to preserve the 
accessibility character on a volume. When you read from tape, the volume 
identifier is optional. 


If you initialize and mount a volume set in which each volume has a unique 
accessibility character that you want to maintain, avoid using the volume 
identifier, because it causes the accessibility character of the first volume in 
the set to overwrite the accessibility character on the continuation volume. 
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For example, to preserve the accessibility character, enter the following command, 
in which 3 is the request identification number: 


$ REPLY/TO=3 


Once the tape file system receives the REPLY command, the system performs 
checks on the continuation volume to ensure that the volume is the correct one. If 
it is the correct volume with proper access codes, the system mounts the volume 
and reissues pending read or write requests to the continuation volume. If the 
volume fails any of these access checks, the system does not mount the volume 
(or initialize and mount it, in the case of a blank tape). 


8.8.3 Modifying Magnetic Tape Characteristics 


Use the DCL command SET MAGTAPE to define the default characteristics 
associated with a specific tape device for subsequent file operations. Use the 
following format: 


SET MAGTAPE device-name 
where: 
device-name Specifies the name of the tape device for which the characteristics are 


to be set. The device must not be currently allocated to any other user. 


The following examples illustrate uses of the SET MAGTAPE command in 
conjunction with the MOUNT command. 


Examples 


1. $ MOUNT MUB1:/FOREIGN 
$ SET MAGTAPE MUB1:/DENSITY=800 


In this example, the MOUNT command mounts a foreign tape on the MUBI: 
drive. The SET MAGTAPE command defines the density at 800 bpi for 
writing to the magnetic tape. (The density is reset only if the tape has never 
been written before.) 


2. § MOUNT MUA0:/FOREIGN 
$ SET MAGTAPE MUA0:/SKIP=FILES:4 


In this example, the MOUNT command mounts a foreign tape on the MUAO: 
drive. The SET MAGTAPE command directs the I/O subsystem to position 
the tape to skip four tape marks. 


3. $ MOUNT MUA1:/FOREIGN 
$ SET MAGTAPE/REWIND MUA1: 


In this example, the MOUNT command mounts a foreign tape on the MUAI: 
drive. The SET MAGTAPE command rewinds the volume. 


8.9 Dismounting Volumes and Volume Sets 
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When you finish processing the files or data on a disk or tape volume, you can 
use the DISMOUNT command to explicitly dismount a single volume or an entire 
volume set. 


Use the following format when you enter the DISMOUNT command: 
DISMOUNT device-name 


Managing Storage Media 
8.9 Dismounting Volumes and Volume Sets 


where: 


device-name Name of the device containing the volume—either a logical name or a 
physical name. If you specify a physical name, the controller defaults 
to A and the unit defaults to 0. 


If the volume currently mounted on the device is a member of a disk 
or tape volume set, all volumes in the set are dismounted unless you 
specify the /UNIT qualifier. 


You can dismount a volume on a local node or on all the nodes throughout a 
cluster. 


Before dismounting a volume or volume set, the DISMOUNT command checks for 
conditions that prevent the dismount from completing: 


¢ Installed swap and page files 

¢ Installed images 

e Devices spooled to the volume 

¢ Open user file (any files not falling into one of the first three groups) 


If none of these conditions is found, the volume is marked for dismount. If any 
of these conditions exists, the DISMOUNT command does not mark the volume 
for dismount but, instead, displays error messages indicating the conditions that 
exist, the number of instances of each condition, and the fact that the volume 
cannot be dismounted. 


In some cases, you might want to mark a volume for dismount even though files 
are open on the volume. Marking the volume for dismount prevents users from 
opening any new files, thereby allowing activity to wind down. You can use the 
qualifier /OVERRIDE=CHECKS to mark the volume for dismount even if files are 
open. 


Dismounting with Cached Information 

As a performance enhancement, the system stores volume information in memory, 
including information about free space on a disk volume, file identifications, 
quota file entries, and file headers. This storing of information is called caching. 
Cached information can include blocks allocated but not yet in a file, or files 
created but not yet in a directory. 


The system writes the information in the caches to the disk when you dismount 
the disk or shut down the system. If you remove a disk from a drive before the 
caches are written to disk, the information in the caches 1 is lost. Therefore, you 
need to follow these guidelines: 


e Avoid write-locking a volume while it is mounted. 
¢ Do not remove a volume from a drive before it has been dismounted. 


¢ Do not halt the system without performing an orderly shutdown procedure 
(see Section 4.8.1). 


You cannot dismount a volume if any known file lists associated with the volume 
contain entries. If a volume is referenced in a known file list, you must complete 
the following steps before you can dismount the volume: 


1. Delete all known images associated with the volume using the Install utility 
delete command. For more information, see Section 16.9.14. 
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2. Wait for: 
All processes using those images to release the images. 


The system to write writable images back to their files. 


Use the DCL command SHOW DEVICES/FILES to determine the status 
of the files. 


The following sections explain how to perform these tasks: 


Task : For More Information 
Dismount a single volume Section 8.9.1 
Dismount a volume set Section 8.9.2 
Dismount foreign volumes Section 8.9.3 
Dismount a volume in a cluster Section 8.9.4 


8.9.1 Dismounting a Single Volume 


This section explains procedures to follow in dismounting a single volume and 
also describes some of the qualifiers you can use with the DISMOUNT command. 


8.9.1.1 Dismounting Before Unloading a Volume 


Always explicitly dismount a volume or volume set with the DISMOUNT 
command, or with a command procedure containing that command, before 
physically unloading that volume. Always wait for the drive to unload before you 
remove the volume. (You can verify that the dismount is complete by entering the 
DCL command SHOW DEVICES.) 


A private volume is dismounted and unloaded automatically if you log out of the 
job from which you mounted the volume. If the system fails, however, the drive is 
not automatically dismounted. 


Note that data loss can occur if you do not explicitly dismount a volume and the 
system fails. For tape volumes, data loss can occur if you unload a volume that 
contains an open file for which file-trailer labels have not been written. When you 
remount the volume and attempt to access the file without file-trailer labels, you 
receive the following error message: 


¢MTACP-magnetic tape position lost 


You can access all the files that precede the file whose file-trailer labels have not 
been written. However, you cannot access the file that does not have file-trailer 
labels. 


8.9.1.2 Dismounting Allocated Devices 
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If the device you are dismounting was allocated with an ALLOCATE command, 
it remains allocated after you dismount it with the DISMOUNT command. If 
the device was implicitly allocated with the MOUNT command, the DISMOUNT 
command deallocates it. 
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8.9.1.3 Using DISMOUNT Command Qualifiers 
Following are explanations of the /UNIT and /NOUNLOAD qualifiers. 


Qualifier Description 


/UNIT Explicitly dismounts a single volume in the volume set without 
dismounting the entire set. (By default, the system dismounts all the 
volumes in the set when you explicitly dismount a single volume in a 
volume set.) 


Using this qualifier dismounts a volume but does not “unbind” the 
volume from the volume set; if you remount the volume, it becomes part 
of the volume set again. 


/NOUNLOAD _ Overrides the default automatic unloading of your volume from the drive. 
With this qualifier, your volume is logically dismounted from the drive; 
however, the volume remains physically loaded on the drive. 


If you use this qualifier to dismount a tape volume, the volume remains 
loaded on the tape drive and the tape reel is rewound to the BOT mark. 


Using this qualifier can save time and eliminate unnecessary handling 
of a volume if you plan to remount or reinitialize a volume you are 
dismounting. 


Example 


The following example shows how to use the DISMOUNT command. The example 
uses the /NOUNLOAD qualifier. 


$ DISMOUNT/NOUNLOAD MUA1: 


In this example, the tape volume is logically dismounted and remains loaded on 
the MUAI: device. Also, the tape reel is rewound to the beginning-of-tape mark. 
The operating system returns you to DCL level. 


8.9.2 Dismounting a Volume Set 


You use the DISMOUNT command to dismount an entire volume set. If you 
explicitly dismount any volume in a disk or tape volume set, the entire volume 
set is dismounted. For example, if you have a volume set that consists of DUA3: 
and DUA4: and you enter the following command, the entire volume set is 
dismounted: 


$ DISMOUNT DUA3: 


8.9.3 Dismounting Foreign Volumes 


You also use the DISMOUNT command to dismount foreign volumes. The 
following command dismounts a volume that has been mounted with the 
/FOREIGN qualifier on the DUAO: device: 


$ DISMOUNT DUAO: 


In this example, the volume that had been mounted with the /FOREIGN qualifier 
on DUAO: is dismounted and automatically unloaded. The system returns you to 
DCL level. 
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8.9.4 Dismounting a Volume in a VMScluster System 


You can use the DISMOUNT command to dismount a volume throughout a 
VMScluster system by using the /CLUSTER qualifier. The following command, 
which requires SYSNAM privilege, dismounts a volume in a VMScluster system: 


$ DISMOUNT/CLUSTER $10$DJA100: 


The DISMOUNT/CLUSTER command first checks for conditions that prevent 
the volume from dismounting on the local node. If none is found, the command 
then checks for such conditions on all the other nodes. If a condition is found on 
any node, the command sends error messages identifying the device, the node on 
which the error occurred, and the error. 


For more information on the DISMOUNT command, see the OpenVMS DCL 
Dictionary. 


8.10 Using Command Procedures for Media Setup 


Many of the operations that you perform on disk and tape media are routine. 

It is probably worthwhile to identify those routine tasks and design command 
procedures to assist you in performing them. To become familiar with the syntax 
used to design and execute command procedures, see the OpenVMS User’s 


Manual. 


You might, for example, want to design command procedures to set up private 
disk and tape volumes. The command procedure examples in this section, 
although general in nature, can serve as guiding strategies for you. You can tailor 
these command procedures to meet the needs of your own setup tasks. 


8.10.1 Sample Command Procedure for Setting Up Disk Volumes 
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The command procedure in this section allocates, initializes, and mounts a disk 
volume. Follow these steps: 


1. Use a text editor to create a file named SETUP.COM. 


2. Enter the following command procedure, which, when executed, allocates and 
mounts a disk: 


$ |! Place a disk in the drive 

$ IF Pl .EQS. "" THEN INQUIRE Pl "enter device name" 
$ IF P2 .EQS. "" THEN INQUIRE P2 "enter volume label" 
$ IF P3 .EQS. "" THEN INQUIRE P3 "enter logical name" 
$ ALLOCATE ‘Pl’ 

$ MOUNT 'P1’ ‘'P2' 'p3! 


This command procedure, although very simple, accomplishes the task of 
allocating and mounting a disk each time you execute it. It prompts you for 
the device name, volume label, and logical name of the disk device that you 
want to allocate and mount. By assigning logical names to your disks, you 
can use this command procedure to allocate and mount devices repeatedly. 


You can take further advantage of the power of a command procedure by 
including a few additional tasks as well. For example, you might design the 
SETUP.COM command procedure to deallocate and dismount the disk. The 
command procedure example used to set up a magnetic tape (described in the 
next section) takes advantage of some of these options. 
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3. To execute the SETUP.COM command procedure, enter the following 
command: 


$ @SETUP 


8.10.2 Sample Command Procedure for Setting Up Tape Volumes 


The command procedure in this section, which is more complex and detailed than 
the previous example, is designed to set up a magnetic tape for processing. The 
ALLOCATE and MOUNT/FOREIGN commands are included in this command 
procedure. Using a text editor, construct the command procedure in the following 
way: 


$ ! First mount the tape on the drive 
$ ON CONTROL _Y THEN GOTO EXIT 

$ ON ERROR THEN GOTO EXIT 

$ WRITE SYSSOUTPUT "Welcome to FETCH." 
$ WRITE SYSSOUTPUT " " 


$ Ll: INQUIRE/NOPUNC PHYS "Have you placed the volume in the drive? " 
$ IF .NOT. PHYS THEN GOTO Ll 

$ INQUIRE/NOPUNC DRIVE "Which drive is the volume mounted on? " 

$ DRIVE = DRIVE - ":" 

$ ALLOCATE ‘DRIVE’ 

$ MOUNT/FOREIGN ‘DRIVE’ 

$ ON ERROR THEN GOTO COMMAND_LOOP 

$ 

$ COMMAND LOOP: INQUIRE/NOPUNC OPTION "FETCH> " 


$ IF OPTION .EQS. "DIR" THEN GOTO DIR 
IF OPTION .EQS. "EXIT" THEN GOTO EXIT 
IF OPTION .EQS. "FETCH" THEN GOTO FETCH 
IF OPTION .EQS. "HELP" THEN GOTO HELP 
IF OPTION .EQS. "LIST" THEN GOTO LIST 
GOTO COMMAND LOOP 
! 
DIR 
D 


INQUIRE SPEC "Filespec" 
IR * SPEC’ 
$ GOTO COMMAND LOOP 
$ HELP: 
$ WRITE SYSSOUTPUT "Enter any of the following commands at the prompt:" 
$ WRITE SYSSOUTPUT " " 
$ WRITE SYSSOUTPUT " " 


$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 


$ WRITE SYSSOUTPUT "DIR (To search for a file)" 

$ WRITE SYSSOUTPUT " " 

$ WRITE SYSSOUTPUT "EXIT (To exit this program)" 

$ WRITE SYSSOUTPUT " " 

§$ WRITE SYSSOUTPUT "FETCH (To perform a BACKUP RESTORE operation)" 
$ WRITE SYSSOUTPUT " " 

$ WRITE SYSSOUTPUT "HELP (To read this text)" 

$ WRITE SYSSOUTPUT " " 

$ WRITE SYSSOUTPUT "LIST (To perform a BACKUP LIST operation)" 
$ GOTO COMMAND LOOP 

$ | 


$ FETCH: INQUIRE FILE "Filespec" 

$ INQUIRE SAVESET "Save set name" 

$ LINE := BACKUP/LOG 'DRIVE’:'SAVESET’ /SELECT='FILE’ 
$ INQUIRE EXCLUDE "Enter any filespecs you want excluded" 

§ IF EXCLUDE .EQS. "" THEN GOTO L2 

$§ LINE := ‘LINE’ /EXCLUDE=('EXCLUDE’ ) 

$ | 

$ L2: INQUIRE/NOPUNC TO "Where do you want the file(s)? (Ret) for current directory)" 
$ IF TO .EQS. "" THEN GOTO REPLACE 

$ LINE := ‘LINE’ ‘TO’ 

$ GOTO L3 

$ REPLACE: LINE := ‘LINE’ [] 
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$! 
$ L3: INQUIRE/NOPUNC NEW "Create a new version if file already exists? " 
$ IF .NOT. NEW THEN GOTO NOT 


$ LINE := ‘LINE’ /NEW_VERSION 

$! 

$ NOT: LINE := ‘LINE’ /OWNER_UIC=ORIGINAL 
$ LINE 

$ GOTO COMMAND LOOP 

$! 


$ LIST: INQUIRE SPEC "Filespec" 
$ INQUIRE SAVESET "Save set name" 
$ INQUIRE/NOPUNC OUTPUT "What do you want to call the list file? (fet) for SYSSOUTPUT )" 


$ IF OUTPUT .EQS. "" THEN GOTO NOOUT 
$ LINE := BACKUP/LIST='OUTPUT’ ‘DRIVE’: ’SAVESET’ /SELECT=( ‘SPEC’ ) 


$ NOOUT: LINE := BACKUP/LIST ‘DRIVE’: 'SAVESET’ /SELECT=( ‘SPEC’ ) 


4: INQUIRE EXCLUDE "Enter any filespecs you want excluded" 
F EXCLUDE .EQS. "" THEN GOT L5 
INE := ‘LINE’ /EXCLUDE=('EXCLUDE’ ) 


$ 
$ L 
$ I 
$ L 
$ } 
$ L5: LINE 

$ GOTO COMMAND LOOP 
$ ! 
$ E 
$ 
$ 


BXIT: 
DISMOUNT ‘DRIVE’ 
DEALLOCATE ‘DRIVE’ © 
Assuming this command procedure is in a file named FETCH.COM, execute the 
command procedure by entering the following command: 


$ @FETCH 


In addition to allocating and mounting functions, as in the previous example, 
FETCH.COM prompts you for input. For example, it specifically asks you if 

the tape is on the drive. Also note that FETCH.COM does a BACKUP restore 
operation. It prompts you for specific options on the restore operation. Finally, 
FETCH.COM explicitly dismounts your magnetic tape volume and deallocates the 
drive after your task completes. 


8.11 Managing Disk Space 


Disk space available for files is finite. As system manager, you share 
responsibility with your users for making the best use of disk space. 


The following sections explain disk quotas and describe some methods you can 
use to conserve and monitor disk space: 


Method For More Information 
Establish disk quotas Section 8.11.2 

Purge files ; Section 8.11.3 

Set version limits on files Section 8.11.4 

Set file expiration dates Section 8.11.5 
Analyze and repair error conditions Section 8.12 
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8.11.1 Understanding Disk Quotas 


A disk quota is a method for maintaining and enforcing limits on the amount of 
disk space available to users on a public volume. You limit the amount of space 
available to individual users on public volumes (or volume sets) by creating and 
maintaining a quota file on each volume. Individual users can similarly restrict 
usage on private volumes. 


Quotas are maintained and enforced on a per-volume basis. Each volume or 
volume set has its own quota file. A volume on which quotas are not maintained 
has no quota file. On a volume set, volume 1 contains the quota file. 


With OPER privilege, you (or the user maintaining the volume) supply 
identifiers and assign quotas and overdrafts with the System Management 
utility (SYSMAN). (During normal file activities, the system automatically 
maintains usage counts.) 


If users run out of disk space during the creation of a file, they receive a 

system message. If they cannot obtain sufficient space by purging or deleting 

unnecessary files, they might contact you to increase their disk quota. If they 

attempt to write a file to a spooled printer, they must have write access and have 
_ sufficient quota on the disk associated with that printer. 


Disk Quota File 


A quota file records all users who are allowed to use the disk, and shows their 
current disk usage and their maximum disk allocation. A quota file, QUOTA.SYS, 
which is stored in directory [000000] with other system files, requires one block of 
disk storage for every 16 entries. 


A quota file has the following format: 


vic @ Usage (2) Permanent Quota © overdraft Limit 4) 
[0,0] 0 333333 
[TTD, DAVIS] 15590 333333 3333 
[ TTD, MORGAN ] 1929 333333 3333 


[MKT , MORSE ] 7650 333333 3333 


@ User Identification Code (UIC) of each user entitled to maintain files on the 
volume. UIC [0,0] appears in all quota files; use it as a template to set default 
values for quotas and overdrafts. 


® Number of disk blocks currently dedicated to a user’s files. This number 
includes the blocks allocated (shown by the DCL command DIRECTORY 
/SIZE=ALL /BY_OWNER=owner), plus at least one block in the index file for 
every file owned by the user. 


© Maximum number of blocks on the volume that a user’s files can occupy. 
When the maximum number is exceeded, the system issues an error message 
when a file is created. 


© Number of blocks by which a user can exceed the quota. 


Each entry in a quota file includes the information shown in Table 8—15. 
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Table 8-15 Contents of a Quota File 


Item Description 

General Identification code of a user entitled to maintain files on the volume 
Identifier or 

UIC 

Usage Number of blocks on the volume taken up by the user’s files 

Quota Maximum number of blocks on the volume that the user’s files can take 


up before an error message is issued 
Overdraft Number of blocks over the quota that the user’s files can take up 


The maximum number of blocks permitted to a user on a volume is the sum of 
the quota and the overdraft. 


A quota file is initialized with an entry for UIC [0,0]. The usage count for this 
UIC should not change from 0; in other words, UIC [0,0] should own no files. Its 
quota and overdraft, however, serve as defaults in certain situations; set them to 
values most likely to be assigned to other UICs as quotas and overdrafts. 


How Quotas Are Maintained | 

During normal use of a volume with a quota file, the system automatically 
updates the usage counts as users create, delete, extend, and truncate files. 
Users without entries in the quota file are not allowed to create files or allocate 
space on the volume unless they have the EXQUOTA privilege. 


To create new files, a user must have disk space usage below quota (not 
overdraft). If adding a new file or expanding a current file exceeds a user’s 
quota, the system prohibits the operation and issues an error message. 


A user with an overdraft might be able to extend an open file after exceeding the 
disk quota (for example, during an editing session). A user can extend an open 
file until usage exceeds the sum of the quota and the overdraft. At this point, the 
system prohibits further extensions to the file. 


Quota restrictions are not enforced for users with the EXQUOTA privilege; 
however, their usage counts are maintained. 
How the Rebuild Operation Ensures Quota File Accuracy 


When you mount a volume that was not properly dismounted the last time it 
was used, the system performs an automatic REBUILD operation. If quotas are 
enforced on the volume, this action ensures that the quota file accurately reflects 
usage of the disk, under any of the following conditions: 


e The system fails 
¢ The volume is physically removed before being dismounted 
e <Auser presses the WRITE PROTECT button 


8.11.2 Establishing Disk Quotas 
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Disk quota operations are enabled by default. However, you can use SYSMAN 
DISKQUOTA commands to control disk usage. You can assign disk quotas to 
users and maintain an accurate record of disk use for ODS Level 2 disks. You 
create a quota file for each disk except the system disk. The quota file records the 
current usage and the maximum disk usage for all users. 
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SYSMAN allows you to access disks that are normally unavailable from your local 
node. With SYSMAN, you can obtain a display of all disks on the other nodes, 
including those that are mounted privately or used as system disks. You can run 
DISKQUOTA on any available disk without logging in to each node. 


8.11.2.1 Creating a Quota File 


The first step in allocating disk space is to create a quota file for each volume or 
each volume set. The absolute maximum number of blocks permitted a user on a 
volume is the sum of the quota and the overdraft. Only users with the EXQUOTA 
privilege can bypass disk quota restrictions. 


How to Perform This Task 
Creating a quota file requires SYSPRV, BYPASS, or GRPPRV privilege. To create 
a quota file on a disk, follow these steps: 


1. Use the SYSMAN command DISKQUOTA CREATE and specify the target 
disk with the /DEVICE qualifier using the following format: 


DISKQUOTA CREATE/DEVICE=device-name 


2. Use the DISKQUOTA MODIFY command to adjust [0,0] to an appropriate 
value for the device using the following format: 


DISKQUOTA MODIFY/DEVICE=device-name/PERMQUOTA=value 


Note 


If you create a quota file or enable disk quotas on a disk that has files on 
it, use the DISKQUOTA REBUILD command to update the disk quota 
entries with the current usage information. 


3. Use the SYSMAN command DISKQUOTA SHOW to display the quota file 
using the following format: 


DISKQUOTA SHOW owner/DEVICE=device-name 
Examples 


1. $ MCR SYSMAN 
SYSMAN> DISKQUOTA CREATE/DEVICE=DUA12: 


The command in this example sets up the quota file, QUOTA.SYS, in directory 
[000000] on the DUA12: device. 


The quota file has one entry, UIC [0,0], that stores default values for quotas 
and overdrafts. 


2. SYSMAN> DISKQUOTA MODIFY/DEVICE=DUA12: [0,0]/PERMQUOTA=3000 


The command in this example edits the entry for UIC [0,0] in the quota file 
on the DUA12: device, setting the default permanent quota to 3000 blocks. 


3. SYSMAN> DISKQUOTA SHOW [0,0]/DEVICE=DUA12: 


The command in this example shows quotas, overdrafts, and usage counts for 
UIC [0,0] on the DUA12: device. 
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8.11.2.2 Monitoring Disk Quotas 
You need to monitor the amount of disk space users consume. Following are two 
methods for doing this: 


Command Description 


MOUNT/QUOTA Use to enforce quotas on a specified disk volume. To use 


MOUNT/QUOTA, you must have the VOLPRO user privilege, 
or your UIC must match the UIC written on the volume. 


SHOW QUOTA Use to determine whether a quota exists for any specific user 


on a specific disk. The display that results from the SHOW 
QUOTA command gives the quotas used, authorized, and 
available. 


Enter the DCL command SHOW QUOTA using the following 
format: 


SHOW QUOTA/USER=uic 


The results of the SHOW QUOTA command depend on 
whether you have read access to the quota file: 


e If you have read access, the command shows how much 
disk space any user on the system has been allocated. 


e If you do not have read access, the command shows your 
own allotment. 


Examples 


1. 


$ SHOW QUOTA 
User [DOCUMENTATION,MALCOLM] has 2780 blocks used, 7220 available, 
of 10000 authorized and permitted overdraft of 500 blocks on DISKS 


The SHOW QUOTA command displays the amount of disk space authorized, 
used, and still available on the current default disk for the present user. The 
permitted overdraft in this example is 500 blocks. 


$ SHOW QUOTA/USER=(DOCUMENTATION, JONES ]/DISK=XXX1: 
%SYSTEM-F-NODISKQUOTA, no disk quota entry for this UIC 


This SHOW QUOTA command shows that the user with UIC 
[DOCUMENTATION,JONES] has no disk quota allocation on the XXX1: 
device. 


$ SHOW QUOTA/USER=[ DOCUMENTATION, ELAINE ] 
User [DOCUMENTATION,ELAINE] has 27305 blocks used, 2305 OVERDRAWN, 
of 25000 authorized and permitted overdraft of 4000 blocks on DISK$ 


This SHOW QUOTA command indicates that a user has an overdrawn quota. 


8.11.2.3 Suspending Quota Operations 

The SYSMAN command DISKQUOTA DISABLE (which requires SYSPRV, 
BYPASS, or GRPPRV privilege), suspends quota operations on a volume; 

the DISKQUOTA ENABLE command lifts the suspension. In addition, you 

can suspend quota operations on a volume at mount time by specifying the 
/NOQUOTA qualifier with the DCL command MOUNT. Disabling quotas requires 
privileges. 
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Whenever quotas are enabled on a volume—either implicitly with the MOUNT 
command or explicitly with the DISKQUOTA ENABLE command—you must 
update disk quota information using the command DISKQUOTA REBUILD. In 
updating the quota file, the system adds new UICs and corrects usage counts for 
each user. (See the OpenVMS System Managemeni Utilities Reference Manual for 
more information.) 


How to Perform This Task 
To discontinue quota operations on a volume, follow these steps: 


1. Log in to SYSMAN. 


2. Use the following format to execute the DISKQUOTA DISABLE command on 
each member of the cluster that is mounting the volume: 


SYSMAN> DISKQUOTA DISABLE 
3. Exit from SYSMAN. 
4. Delete the QUOTA.SYS file in the top-level directory disk: [000000]. 
Note that the system does‘not suspend quotas across disk mounts if the 


QUOTA.SYS file is still present. 
8.11.3 Purging Files 


One of the best ways to conserve disk space is to purge the following: 
e Old versions of files 


Before purging files, make sure that the most recent versions are the ones 
you want to preserve. 


e System log files that the system generates automatically, such as the operator 
log and accounting log files 


e Log files created by the PRINT and SUBMIT commands 


Encourage individual users to purge files in their own areas and directories. 
If necessary, you can purge files from some or all directories. Following are 
examples of purge commands. 


Examples 
1. $ PURGE/LOG $DISK1:[JONES...] 


The command in this example purges all files in the directory [JONES] and 
all the subdirectories below [JONES] on the $DISK1: device. It logs the files 
that are deleted (displaying their names on the terminal as they are deleted). 


2. $ PURGE/KEEP=3 $DISK1:[*...] 
This example uses wildcard characters to perform global purges and uses the 


/KEEP qualifier to retain only three versions of each file. 


8.11.4 Setting Version Limits on Files 


Another way to conserve disk space is to limit the number of file versions that 
users can create in a directory by using the /VERSION_LIMIT qualifier with 
the SET DIRECTORY or CREATE DIRECTORY command using the following 


format: 
SET DIRECTORY/VERSION_LIMIT=value 
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Example . 
$ CREATE/DIRECTORY $DISK1: [JONES] /OWNER_UIC=[200,1]/VERSION_LIMIT=3 


In the example, files in account [JONES] cannot exceed three versions. If a user 
in this directory attempts to exceed the three-version limit, the system purges the 
file, leaving only the three most recent versions. 


Note 


Be careful about setting a version limit on the master file directory (MFD). 
Because the system uses the version limit that you set on the MFD on 
any directory you create beneath the MFD, users might inadvertently lose 
important data. 


8.11.5 Setting File Expiration Dates 
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Files—11 uses the expiration date of each file to track the use of the file. The 
expiration dates aid the disposal of seldom-used files when you use the DCL 
command BACKUP/DELETE command. 


File expiration is a file system feature that is available only on Files—11 Structure 
Level 2 disks. 


After you set an expiration date on a volume, the retention periods operate as 
follows: 


¢ When a user creates a file, the expiration date of the file is the current time 
plus the maximum time set on the volume. 


e Every time a user accesses a file (for either a read or write operation), the 
current time is added to the minimum time. If the total is greater than the 
expiration date, the new expiration date is used. (The new expiration date is 
calculated from the maximum retention period.) ; 


The expiration date of a frequently accessed file fluctuates between the minimum 
and maximum period plus the current date. When you set a suitable interval 
between minimum and maximum retention periods, you can balance between 
accuracy and efficiency in maintaining expiration dates. Be careful about setting 
expiration dates; either be very specific, or set the expiration date in the simplest 
way. 


‘Certain commands and utilities, such as the DIRECTORY command and the 


Backup utility, can selectively operate on files that are expired. For example, you 
can issue a command like the following one: 


$ BACKUP/DELETE PUBLIC:[*...]/BEFORE=TODAY/EXPIRED MUAQ:ARCH20JUN 


In this example, the BACKUP command copies to tape and then deletes all 
expired files. Users might not be aware of file expiration dates, so retain the tape 
for a substantial period of time. 


For more information on the Backup utility, see Section 10.13.2. 


How to Perform This Task 
To enable the setting of expiration dates, enter the DCL command SET VOLUME 
in the following format: 


SET VOLUME device-name[:][,.../RETENTION=(min,max) 
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For min and max, specify the minimum and maximum retention periods for files 
on the volume, expressed as delta time values. 


If you specify only a single value in the SET VOLUME/RETENTION command, 
the system uses the value of the minimum retention period; then the maximum 
retention period is set to twice the minimum or the minimum plus 7 days, 
whichever is less. For example, you might set the retention period as follows: 


$ SET VOLUME PAYVOL1: /RETENTION=(3) 


The system uses 3 as the minimum retention period. Twice the minimum is 6 
days; the minimum plus 7 is 10. Because the system uses the smaller of the two 
numbers, the retention period is set to 6. 


You can simulate the maintenance of “access dates,” which are available in some 
other operating systems, by setting the retention periods to very small values (for 
example, 1 hour). Note, however, that doing so substantially increases overhead 
in the file system. 


This feature does not automatically remove unused files; instead, it maintains 
expiration dates to permit you to develop your own policy for handling files with 
little or no activity. 


Note 


If you start maintaining expiration dates on a previously existing volume, 
be aware that the expiration dates on existing files are 0 until the files 
are accessed. Files with expiration dates of 0 are considered expired. 


Refer to the OpenVMS DCL Dictionary for details on the parameters and 
qualifiers of the SET VOLUME command. 


Example 
$ SET VOLUME DUAO:/RETENTION=(15-0:0,20-0:0) 


In this example, the command sets the minimum retention period to 15 days and 
the maximum to 20 days. 


8.12 Using the Analyze/Disk_Structure Utility to Check and Repair 
Disks 


You can reclaim disk space by using the Analyze/Disk_Structure utility 
(ANALYZE/DISK_STRUCTURE) to identify and delete lost files and files marked 
for deletion. Use this utility on a regular basis to check disks for inconsistencies 
and errors, and to recover lost files. 


This utility detects Files—11 On-Disk Structure (ODS) disk problems that have 
been caused by hardware errors, system errors, and user errors. ANALYZE 
/DISK_STRUCTURE does the following: 


¢ Verifies the Files—11 structure on disk volumes 
e Reports errors 


e Repairs errors when you specify the /REPAIR qualifier 
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ANALYZE/DISK_STRUCTURE performs the verification of a volume or volume 
set in eight distinct stages. During these stages, the utility collects information 
used in reporting errors or performing repairs. However, the utility repairs 
volumes only when you specify the /REPAIR qualifier. 


Digital recommends that you execute ANALYZE/DISK_STRUCTURE in two 
passes: 


1. To report all errors 
2. With the /REPAIR and /CONFIRM qualifiers to repair selected errors 


Directing ANALYZE/DISK_STRUCTURE Output 


By default, ANALYZE/DISK_STRUCTURE directs all output to your terminal. By 
using the /LIST qualifier, however, you can create a file containing the following 
information about each file on the disk: 


e File identification (FID) 

e File name 

¢ Owner 

e Errors associated with the file 


The following sections explain ways to use ANALYZE/DISK_STRUCTURE: 


Task For More Information 
To report errors (but not repair them) Section 8.12.1 
To both report and repair errors Section 8.12.2 
To recover lost files Section 8.12.3 
To create a disk usage file Section 8.12.4 


The OpenVMS System Management Utilities Reference Manual contains 
additional information about this utility. 


8.12.1 Reporting Errors 
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By default, ANALYZE/DISK_STRUCTURE reports errors but does not make 
repairs. In this mode, ANALYZE/DISK_STRUCTURE runs through eight stages 
of data collection and then, by default, prints a list of all errors and lost files to 
your terminal. 


One type of problem that ANALYZE/DISK_STRUCTURE locates is an invalid 
directory backlink. (A backlink is a pointer to the directory in which a file 
resides.) If your disk has a file with an invalid directory backlink, ANALYZE 
/DISK_STRUCTURE displays the following message and the file specification to 
which the error applies: 


$VERIFY-I-BACKLINK, incorrect directory back link [SYSEXE]SYSBOOT.EXE;1 


How to Perform This Task 
Enter the ANALYZE/DISK_STRUCTURE command using the following format: 


ANALYZE/DISK_STRUCTURE device-name:[qualifier] 


Example 
The following command reports all disk structure errors on the DUAI: device: 


$ ANALYZE/DISK_ STRUCTURE DUA1: 
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8.12.2 Reporting and Repairing Errors 


To instruct ANALYZE/DISK_STRUCTURE to repair the errors that it detects, 
enter the /REPAIR qualifier using the following format: 


ANALYZE/DISK_STRUCTURE device-name/REPAIR 


To select which errors ANALYZE/DISK_STRUCTURE repairs, enter both the 
/REPAIR and /CONFIRM qualifiers using the following format; 


ANALYZE/DISK_STRUCTURE device-name/REPAIR/CONFIRM 


When you issue this command, ANALYZE/DISK_STRUCTURE displays a 
description of each error and prompts you for confirmation before making a 
repair. 


Examples 
1. $ ANALYZE/DISK STRUCTURE DUA1:/REPAIR 


In this example, the command reports and repairs all errors on the DUAL: 
device. 


2. $ ANALYZE/DISK STRUCTURE DUA1:/REPAIR/CONFIRM 


The command in this example might produce the following messages and 
prompts: 


$VERIFY-I-BACKLINK, incorrect directory back link [SYSO]SYSMAINT.DIR;1 
Repair this error? (Y or N): Y 

$VERIFY-I-BACKLINK, incorrect directory back link [SYSEXE]SYSBOOT.EXE;1] 
Repair this error? (Y or N): N 


For complete descriptions of all errors and recommended actions, refer to the 
OpenVMS Command Definition, Librarian, and Message Utilities Manual. 


8.12.3 Recovering Lost Files 


A lost file is a file that is not linked to a directory. Under normal circumstances, 
files are not lost. However, files occasionally lose their directory links because of 
disk corruption, hardware problems, or user error. 


For example, in cleaning up files and directories, you might inadvertently delete 
directories that still point to files. When you delete a directory file (a file with the 
file type .DIR) without first deleting its subordinate files, the files referred to by 
that directory become lost files. Though lost, these files remain on the disk and 
consume space. 


Use the Analyze/Disk_Structure utility periodically to check for disk structure 
errors such as lost files on the disk. When you run ANALYZE/DISK_ 
STRUCTURE specifying the /REPAIR qualifier, the utility places lost files in 
disk:|[SYSLOST] and issues a message about each file, shown in the example that 
follows. (See the OpenVMS System Management Utilities Reference Manual for 
more information.) 
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Example | 
$ ANALYZE/DISK_STRUCTURE/REPAIR/CONFIRM DDAO: 


The command in this example analyzes and repairs all errors and lost files 
on the DDAO: device. If it discovers lost files on your disk, ANALYZE/DISK_ 
STRUCTURE issues messages similar to the following: 


SVERIFY-W-LOSTHEADER, file (16,1,1) []X.X;1 
not found in a directory 

$VERIFY-W-LOSTHEADER, file (17,1,1) []Y.¥;1 
not found in a directory 

$VERIFY-W-LOSTHEADER, file (18,1,1) []Z.2;1 
not found in a directory 

$VERIFY-W-LOSTHEADER, file (19,1,1) []X.X;2 
not found in a directory 


- QVERIFY-W-LOSTHEADER, file (20,1,1) []¥.¥;2 


not found in a directory 
$VERIFY-W-LOSTHEADER, file (21,1,1) []Z.;1 

not found in a directory 
$VERIFY-W-LOSTHEADER, file (22,1,1) []Z-;2 

not found in a directory 
$VERIFY-W-LOSTHEADER, file (23,1,1) LOGIN.COM;163 

not found in a. directory 
$VERIFY-W-LOSTHEADER, file (24,1,1) MANYACL.COM;1 

not found in a directory 


All lost files in this example are automatically moved to DDAO:[SYSLOST]. 


Another opportunity to check for lost files on your system is during a backup 
operation. See Section 10.13.3 for details. 


8.12.4 Creating a Disk Usage File 


You can create a disk usage file by using the /USAGE qualifier. The 
identification record in the file header contains a summary of disk and 
volume characteristics. Following the identification record is a series of summary 
records; one summary record is created for each file on the disk. A summary 
record contains the owner, size, and name of the file. 


Example 
$ ANALYZE/DISK_STRUCTURE/USAGE=[ACCOUNT]USAGE DDA0.DAT DDAO: 


In this example, the /USAGE qualifier creates a disk usage file, USAGE_ 
DDAO.DAT, and places it in the [ACCOUNT] directory. 


8.13 Using Mount Verification for Recovery 
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Mount verification is a recovery mechanism for disk and tape operations. Ifa 
device goes off line or is write-locked while mount verification is enabled, you can 
correct the problem and continue the operation. 


Without mount verification, a write lock or offline error causes a volume to be 
dismounted immediately. All outstanding I/O to the volume is canceled, and all 
open files on the volume are closed. Any data not yet written to the volume is 
lost. 
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8.13.1 Understanding Mount Verification 


When the system or a user attempts to access a device after it has gone off line, 
mount verification is initiated. Usually a device goes off line as the result of a 
hardware or user error. Once a device is off line, the hardware (and for some 
disks, the software) marks the disk or tape as “invalid,” and I/O requests for that 
device fail. 


As long as mount verification is enabled, the following occurs: 


1. The software marks the volume to indicate that it is undergoing mount 
verification. 


2. The software stalls all I/O operations to the disk or tape until the problem is 
corrected. 


3. The Operator Communication Manager (OPCOM) issues a message to 
operators enabled for DISKS and DEVICES or TAPES and DEVICES. The 
message announces the unavailability of the disk or tape in the following 
format: 


$$3%$333333% OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %3%%%%%33%%% 
Device <device-name> is offline. 
Mount verification in progress. 


When a device goes off line or is write-locked, mount verification sends two 
messages: 


e One message goes to OPCOM. 


e The other message, distinguished by the prefix 7SYSTEM-I-MOUNTVER, 
goes directly to the system console (OPAO:), bypassing OPCOM. 


The second message is a form of insurance in cases in which OPCOM is 
unavailable. For example, if the system disk undergoes mount verification or 

if OPCOM is not present on a system, you at least receive the messages with 
the 2%SYSTEM-I-MOUNTVER prefix. Under normal circumstances, the operator 
terminal receives both messages, with the %SYSTEM-I-MOUNTVER message 
arriving first. 


These messages notify you of the problem, and allow you to correct the problem 
and recover the operation. When a pending mount verification is canceled by 
timing out, OPCOM prints a message in the following format: 


$$%3$3333S% OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %%%%%33%%%% 
Mount verification aborted for device <device-name>. 


After a mount verification times out, all pending and future I/O requests to the 
volume fail. You must dismount and remount the disk before users can access it 
again. 


Note 


Mount verification caused by a write-lock error does not time out. 
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Mount Verification and Write-Locking 


Suppose, for example, that a volume is mounted on a drive with write-lock off, 
and someone toggles the WRITE LOCK switch. If mount verification is enabled 
for the volume, the volume enters mount verification, and all I/O operations 

to the volume are suspended until you recover the operation, as explained in 
Section 8.13.2.4. 


At mount time, if the system detects that the caches were not written back 

the last time the volume was used, the system automatically rebuilds the file 
information by scanning the contents of the volume. However, files being written 
at the time of the improper dismount might be partially or entirely lost. See 
Section 8.12 for details about analyzing and repairing these problems. 


With the mount verification feature of disk and tape handling, users are generally 
unaware that a mounted disk or tape has gone off line and returned on line, or in 
some other way has become unreachable and then restored. 


8.13.2 Using Mount Verification 


The following sections explain how to perform these operations: 


Task For More Information 
Enable and disable mount verification Section 8.13.2.1 
Control timeout periods for mount verification Section 8.13.2.2 
Recover from offline errors Section 8.13.2.3 
Recover from write-lock errors Section 8.13.2.4 
Cancel mount verification ; Section 8.13.2.5 


8.13.2.1 Enabling Mount Verification 


Mount verification is enabled by default when you mount a disk or tape. To 
disable mount verification, you must specify /NOMOUNT_VERIFICATION when 
you mount a disk or tape. 


Note that this feature applies to standard mounted tapes, foreign mounted tapes, 
and Files—11 disks. 


8.13.2.2 Controlling Timeout Periods for Mount Verification 
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You can control the amount of time (in seconds) that is allowed for a mount 
verification to complete before it is automatically canceled. The MVTIMEOUT 
system parameter for disks and the TAPE_MVTIMEOUT system parameter 
for tapes define the time (in seconds) that is allowed for a pending mount 
verification to complete before it is automatically canceled. (See the OpenVMS 
System Management Utilities Reference Manual for more information on system 
parameters.) 


Always set either parameter to a reasonable value for the typical operations at 
your site. Note that resetting the value of the parameter does not affect a mount 
verification that is currently in progress. Ten minutes (600 seconds) is usually 

a good value for MVTIMEOUT and TAPE_MVTIMEOUT, whether or not an 
operator is usually present. ; 
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8.13.2.3 Recovering from Offline Errors 


When a mounted disk or tape volume goes off line while mount verification is 
enabled, you can try to recover, or you can terminate the mount request. The 
following options are available: 


¢ Try to put the device back on line by toggling the START or RUN button on 
disks or the LOAD button on tapes. If the device has failed, terminate mount 
verification. 


e¢ Take the disk or tape out of the offline and verification-pending state by 
shutting down mount verification with one of the three techniques described 
in Section 8.13.2.5. These techniques include canceling the mount request, 
dismounting the volume, and allowing mount verification to time out. 


If you successfully put the device back on line, the mount verification software 
that polls the disk or tape drive begins verification in the following sequence of 
steps: 


1. The system checks to see that the currently mounted disk or tape has the 
same identification as the previously mounted volume. In this way, mount 
verification confirms that this is the same disk or tape that was previously 
mounted and no switching has occurred. 


If the drive contains the wrong volume, OPCOM issues a message in this 
format: 


$S3S3S333E% OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %33%%%3%%3%% 
Device <device-name> contains the wrong volume. 
Mount verification in progress. 


2. Once mount verification completes, the disk is marked as valid, and OPCOM 
issues a message in the following format: 


$$%$%%$%%333%3% OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %%%%%%%%%%% 
Mount verification completed for device <device-name>. 


3. I/O operations to the disk or tape proceed, as shown in the following example: 


$%$$%$BSS33% OPCOM, 28-DEC-1993 11:54:54.12 %33%3%3%333%% 
Device DUAO: is offline. 
Mount verification in progress. 


$333333333% OPCOM, 28-DEC-1993 11:57:34.22 %333%3%3%33% 
Mount verification completed for device DUAO0:. 


In this example, the message from OPCOM informs the operator that device 
DUAO: went off line and mount verification was initiated. The operator finds 
that the drive was accidentally powered down and successfully powers it up 
again. 


The last message in the example indicates that mount verification is satisfied 
that the same volume is on the drive as before the error. All I/O operations to 
the volume resume. 


8.13.2.4 Recovering from Write-Lock Errors 


Devices become write-locked when a hardware or user error occurs while a disk 
or a tape volume is mounted for a write operation. For example, if a disk is write- 
locked or a tape is missing a write ring, the hardware generates an error. As soon 
as the software discovers that the disk or tape is write-locked (for example, when 
an I/O operation fails with a write-lock error), mount verification begins. 


8-59 


Managing Storage Media 
8.13 Using Mount Verification for Recovery 


OPCOM issues a message in the following format to the operators enabled for 
DISKS and DEVICES or TAPES and DEVICES, announcing the unavailability of 
the disk or tape: 


$ESESESEESEE OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %%%3%33%33%d 
Device <device-name> has been write-locked. 
Mount verification in progress. 


You can either recover the operation or terminate mount verification. Your 
options include the following: 


e Enable the drive for writing by toggling the hardware WRITE LOCK switch 
of the disk, or check to see that a tape volume has a write ring. 


e Ifthe disk or tape drive is faulty, but another functioning drive is available on 
the same controller, move the disk or tape to the functioning drive and swap 
the unit select plugs. (Note that switching to another drive causes the volume 
to undergo offline mount verification; once this completes, the write-lock 
mount verification continues.) 


e Terminate the mount operation by shutting down mount verification with one 
of the techniques described in Section 8.13.2.5. 


Once the mount verification software determines that the volume is in a write- 
enabled state, I/O operations to the tape or disk resume with no further messages. 


8.13.2.5 Canceling Mount Verification 
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You can cancel a mount verification request in one of the following ways: 


e Dismount the volume with the DCL command DISMOUNT from a process 
that is not hung. 

e Ifthe device is off line, allow mount verification to time out. The expiration 
value is 10 minutes by default; however, you can use the system parameter 
MVTIMEOUT (for disk) or TAPE_MVTIMEOUT (for tape) to set the value to 
whatever you want. When the time expires, the system automatically cancels 
the pending mount verification. Note that a mount verification initiated by a 
write-lock condition does not time out. 


e Invoke a special canceling routine from the console terminal. 
The following sections describe these methods in more detail. 


Using the DISMOUNT Command 
To dismount a volume, follow these steps: 


1. Log in at another terminal, or use any logged-in terminal that has access to 
the volume. (It does not need to be an operator terminal.) 


2. Enter the DISMOUNT/ABORT command for the volume. (To use the /ABORT 
qualifier with a volume that is not mounted group or system, you must have 
volume ownership or the user privilege VOLPRO.) 

If your system is in a VMScluster environment, also specify the /CLUSTER 
qualifier. 

When you cancel a pending mount verification by dismounting the volume, 
OPCOM issues a message in the following format: 


$$%SS%3ESE3% OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %%%3%3%333% 
Mount verification aborted for device <device-name>. 


3. 
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If you do not have access to the volume, you receive an error message. You 
can try again if you can find an appropriate process to use. If your process 
hangs, the system file ACP is hung, and you cannot use this technique to 
cancel mount verification. 


When the cancellation is complete, remove the volume from the drive. 


Using Cancellation Commands 


To cancel mount verification, you run a special interrupt program called Interrupt 
Priority C (IPC). IPC issues a software interrupt to gain the attention of the 
operating system. You use IPC to cancel mount verification, enter the debugger, 
or recalculate the quorum on a VMScluster system. (The debugger in this case 
refers to the system-level debugger, XDELTA.) 


The IPC program converts lowercase characters to uppercase, issues the terminal 
bell character whenever it receives illegal characters (such as most control 
characters), compresses multiple spaces, and ignores leading spaces. 


How to Perform This Task 


1. 


Invoke IPC by displaying the console prompt and entering the following 
sequence of commands from the console terminal: 


>>> HALT 
>>> D/I 14 C 
>>> CONT 
IPC> 


Enter one of the following commands in response to the IPC> prompt: 


Command Explanation 
C device-name Cancels any pending mount verification on the device specified. (A 


warning is given if no mount verification was in progress for that 
device.) For example: 


IPC> C MUAI1: 


xX Transfers control to the debugging tool XDELTA (provided it was 
loaded with the system by setting the appropriate value in the boot 
file). If XDELTA has not been loaded, the prompt IPC> is reissued. 
For example: 


IPC> X 


Q Recalculates the quorum in a VMScluster system. 


When a pending mount verification is canceled, OPCOM prints a message in 
the following format: 


$%3%%%33E33% OPCOM, <dd-mmm-yyyy hh:mm:ss.cc> %%%%3%3%%%% 
Mount verification aborted for device <device-name>. 


Exit from IPC by pressing Ctrl/Z. 


After you successfully cancel a pending mount verification with this 
technique, you must dismount and then remount the volume before you 
can access it again. 
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Example 

$%%$333S$3% OPCOM, 28-DEC-1993 10:54:54.12 %3%%333%3333 
Device DUAO: is offline. 
Mount verification in progress. 


>>> HALT 
>>> D/I 14 C 
>>> CONT 
TPC> C DUAO: 


IPC> 

SSYSTEM-I-MOUNTVER, DUAQ: has aborted mount verification. 
$3%$3B3S3%% OPCOM, 28-DEC-1993 10:56:26.13 %%%%%%3333% 
Mount verification aborted for device DUA0: 


In this example, device DUAO: is off line, but you are unable to spin the disk 


back up. No other drive is available on the controller, so you cannot switch the 
unit select plugs of the two drives. 


Do not enter a DISMOUNT command for the disk, because it was mounted as a 
private volume, and you do not have access to it. The %SYSTEM-I-MOUNTVER 
message also appears because this is the console terminal. 


8.14 Using the Bad Block Locator Utility to Detect Media Errors 
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The DCL command ANALYZE/MEDIA invokes the optional Bad Block Locator 
utility (BAD), which analyzes block-addressable media and records the location of 
blocks that cannot reliably store data. 


Note 


Many newer devices automatically check for bad blocks; therefore, BAD is 
more useful with older devices that do not check for bad blocks. 


To test the blocks on a volume, ANALYZE/MEDIA does the following: 

e Writes a test pattern to each block on the media 

e Reads the contents of the block into a buffer 

¢ Compares the data read back with the data written 

If the data does not compare exactly, a block cannot reliably store data. 


When the Bad Block Locator utility locates a bad block, it records the address of 
the block. Consecutive bad blocks are recorded as single entries for non-last-track 
devices. After it finishes testing the disk, BAD writes the addresses of the bad 
blocks into a file called the detected bad block file (DBBF). 


Caution 


“Testing a volume for bad blocks destroys its contents. However, you can 
update the detected bad block file (DBBF) without erasing the contents of 
the volume by using the ANALYZE/MEDIA qualifiers /NOEXERCISE and 
/BAD_BLOCKS. 


To use BAD, you perform the following steps: 


1. Allocate the device with the DCL command ALLOCATE (to ensure that the 
device is not accessed by any other programs). 
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= 


Enter the DCL command ANALYZE/MEDIA. 
3. Enter the DCL command MOUNT/FOREIGN. 


When the device is mounted as foreign, the system does not recognize it as a 
Files—11 volume, and BAD can execute. 


Refer to online help or to the optional OpenVMS Bad Block Locator Utility 
Manual for details on using the Bad Block Locator utility. 
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Using Files and Directories 


This chapter discusses concepts and tasks related to file protection, file 
manipulation, and data transfer. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 
Getting file information Section 9.2 
Protecting disk files Section 9.3.3 
Protecting disk directory files Section 9.3.4 
Protecting magnetic tape files Section 9.3.5 
Accessing disk files Section 9.4 
Accessing tape files Section 9.5 
Copying and transferring files Section 9.6 


This chapter explains the following concepts: 


Concept Section 
DCL commands with files Section 9.1 
File protection Section 9.3.1 
Tape file names Section 9.5.1 


9.1 Using DCL Commands with Files 


You use the DIGITAL Command Language (DCL) to perform a number of 
operations on files; among them are the following: 


Operation DCL Command 
Retrieve disk and magnetic tape file information, such SHOW DEVICES/FULL, 
as device and protection characteristics, and display this SHOW MAGTAPE, 
information on your terminal screen SHOW SECURITY 
Modify disk file characteristics, such as protection or UIC SET PROTECTION, 
information +SET SECURITY/ 
PROTECTION 
Display the contents of a directory DIRECTORY 
Display the contents of a file TYPE 
Copy files to and from disk and magnetic tape volumes COPY 
{VAX specific 
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Most DCL commands require file-structured devices. (The OpenVMS DCL 
Dictionary lists commands that do not require file-structured devices.) 


In addition to manipulating files through DCL, you can write programs to assist 
you in routine file-manipulation tasks. You can write these programs in any of 
the languages supported by the operating system. 


If you want to manipulate individual records within files (that is, to access 

files at the record level), write programs that include OpenVMS RMS facilities. 
Examples of the RMS facilities used to manipulate files at the record level are in 
the OpenVMS Record Management Services Reference Manual. 


9.2 Getting File Information 
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With the DCL command DIRECTORY, you can retrieve information about disk 
and magnetic tape files in a directory, using the following format: 


DIRECTORY [filespec],...]] 


When you include certain command qualifiers along with the DIRECTORY 
command, you can retrieve information in addition to a list of the names of the 
files in the directory. See the OpenVMS DCL Dictionary for a list of qualifiers 
that you can use with the DIRECTORY command and with other DCL commands. 


The following examples illustrate three cases of retrieving information from 
the [MALCOLM] directory, which resides on a disk with the logical name 
DISK$DOCUMENT. 


Examples 
1. $ DIRECTORY AVERAGE. * 


Directory DISKSDOCUMENT: [MALCOLM] 
AVERAGE . EXE; 6 AVERAGE. FOR; 6 AVERAGE .LIS; 4 AVERAGE .OBJ; 12 


Total of 4 files. 


The DIRECTORY command in this example lists all file types of the 
AVERAGE file and the version number of each file. The command would 
also list all versions of these files; however, only one version of each file exists. 


2. $ DIRECTORY/SIZE/DATE/VERSIONS=1/PROTECTION AVERAGE 
Directory DISKSDOCUMENT: [MALCOLM] 


AVERAGE . EXE; 6 6 10-APR-1993 15:43 (RWED,RWED,RWED, RE) 
AVERAGE . FOR; 6 2 2-APR~1993 10:29 (RWED,RWED,RWED,RE) 
AVERAGE.LIS;4 5 9-APR-1993 16:27 (RWED,RWED,RWED,RE) 
AVERAGE . OBJ ; 6 2 9-APR-1993 16:27 (RWED,RWED,RWED,RE) 


Total of 4 files, 15 blocks. 


The DIRECTORY command in this example displays all the file types of 
the AVERAGE file and the version number of each file. The /SIZE qualifier 
displays the size of each file in blocks used. The /DATE qualifier displays 
the creation date of the version of the file that is listed. The VERSIONS=1 
qualifier limits the number of versions of the file displayed to one (the most 
recent) version. The /PROTECTION qualifier displays the file protection for 
each file. 
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3. $ DIRECTORY/FULL/VERSIONS=1 [MALCOLM...]AVERAGE.EXE 


Directory DISKSDOCUMENT: [MALCOLM] 


AVERAGE . EXE; 6 File ID: (4098,149,0) 

Size: 36/36 Owner: [ DOCUMENTATION , MALCOLM J 
Created: 27-JUN-1993 12:22:26.30 

Revised: 27-JUN-1993 12:22:51.35 (2) 

Expires: <None specified> 

Backup: 3-JUL-1993 22:03.09 


Effective: <None specified> 

Recording: <None specified> 

File organization: Sequential 

File attributes: Allocation: 36, Extend: 36, Global buffer count: 0 
No version limit 

Record format: Variable length, maximum 255 bytes 

Record attributes: Carriage return carriage control 

Journaling enabled: None 

File protection: System:RWED, Owner:RWED, Group:RE, World: 

Access Cntrl List: None 


Total of 1 file, 36/36 blocks. 


Directory DISK$DOCUMENT: [MALCOLM. TEST] 


AVERAGE. EXE; 1 File ID: (7714,29,0) 
Size: 36/36 Owner: { DOCUMENTATION , MALCOLM ] 


Created: 15-APR-1993 10:12 
Revised: 15-APR-1993 10:12 (1) 
Expires: <None specified> 
Backup: 15-APR-1993 22:41 


Effective: <None specified> 

Recording: <None specified> 

File organization: Sequential 

File attributes: Allocation: 36, Extend: 36, Global buffer count: 0 
No version limit 

Record format: Variable length, maximum 255 bytes 

Record attributes: Carriage return carriage control 

Journaling Enabled : None 


File protection: System:RWED, Owner:RWED, Group:RE, World: 
Access Cntrl List: None 


Total of 1 file, 36/36 blocks. 
Grand total of 2 directories, 2 files, 72/72 blocks. 


The DIRECTORY command in this example displays a full directory listing of 
one version of the AVERAGE.EXE file in the top-level directory [MALCOLM] 
and subdirectories under it. 


9.3 Protecting Files 


The following sections discuss file protection concepts and explain how to perform 
these operations: 
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Operation For More Information 
Display file ownership and protection Section 9.3.2 
Protect disk files Section 9.3.3 
Protect disk directory files | Section 9.3.4 
Protect magnetic tape files Section 9.3.5 


9.3.1 Understanding File Protection Concepts 
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You can protect data on disk and magnetic tape media at the following levels: 


Level of Protection Description; For More Information 


Device level For information on setting device protection characteristics on VAX 
systems, see the descriptions of the DCL commands INITIALIZE, 
MOUNT, SET DEVICES, {SET SECURITY/PROTECTION, and 
SET VOLUME in Chapter 8 and in the OpenVMS DCL Dictionary. 
Refer to Chapter 7 for additional information about peripheral 
devices. 


Volume level The system provides protection for both disk and tape volumes. 
For more information about each of these, see the following sections: 


e Disk volume protection—Section 8.4.1 
¢ Tape volume protection—Section 8.4.2 
File level The system provides protection for disk files and directory files. 
For more information, see the following sections: 
¢ Individual disk files—Section 9.3.3 


e Directory files that reside on disk volumes—Section 9.3.4 
*VAX specific 


You can protect data residing on disk and tape volumes by using one or more of 
the following: 


Type of Protection For More Information 
UIC-based protection codes Chapter 11 

Access control lists (ACLs) Chapter 11 

ISO 9660-formatted media protection Section 8.4.2 

se gees accessibility protection (magnetic tape Section 8.4.2 

only 


For the most part, file protection is transparent. Tools exist, however, to adjust 
the protection of a file. You can set the protection or modify the ACL of a file if at 
least one of the following is true: 


e You own the file. 
¢ You have control access to the file. 
° You have SYSPRV privilege. 
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¢ On AXP systems, you have READALL privilege. ¢ 
¢ The group part of your UIC is less than or equal to MAXSYSGROUP. 
* You have GRPPRV and you have the same group UIC as the file. 





Note 


You cannot completely protect a file without applying at least the same 
protection to the directory in which the file resides. See Section 9.3.4 for 
information on directory protection. 


9.3.2 Displaying File Ownership and Protection 


You can display ownership and protection information with the commands and 
qualifiers shown in Table 9-1. 


Table 9-1 DCL Commands to Display Ownership and Protection 


Command Use to Display 

DIRECTORY/ACL filespec ACL of file 

DIRECTORY/OWNER_UIC filespec UIC of owner of file 

DIRECTORY/PROTECTION filespec UIC-based protection of file 

DIRECTORY/SECURITY All of the above 

DIRECTORY/FULL filespec All of the above and other, non-security 
information 

SHOW ACL obj-name Device, file, logical name table, global section, 
queue, or capability ACL 

SHOW DEVICE/FULL device-name Device UIC and protection 

SHOW PROCESS Process UIC 

SHOW PROTECTION Default file protection 

*SHOW SECURITY All of the above 

{VAX specific 


Directory structures do not apply to tape volumes. However, you can use the 
DIRECTORY command to search for files on tape volumes. Section 9.5 describes 
how to access tape files for read and write operations and also explains the use of 
the DIRECTORY command for tapes. 


The DCL command SHOW PROTECTION displays the current process default 
protection. This protection is applied to files created during your terminal session 
or to batch jobs, where defaults from directories or previously existing versions 
are not available. 


Note 


To use the SHOW PROTECTION command to display the default 
protection of magnetic tapes, you must specify the /PROTECTION 
qualifier with the INITIALIZE command when you initialize the magnetic 
tape volume. Otherwise, the protection is not written to the magnetic 
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tape volume. See the description of initializing magnetic tape volumes in 
Section 8.1.3.2. 


The next example illustrates how you can use the SHOW PROTECTION 
command to display the default protection characteristics for disk files. 


Example 


$ SHOW PROTECTION 
SYSTEM=RWED, OWNER=RWED, GROUP=RE, WORLD=NO ACCESS 


In this example, the SHOW PROTECTION command requests a display of the 
current protection defaults. 


9.3.3 Protecting Disk Files 
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Each file on a disk has its own protection code, which is distinct from the 
protection that applies to the disk volume itself. Files residing on disk volumes 
have the access types shown in Table 9-2. 


Table 9-2 Access Types with Disk File Protection 


Access Type Description 


Read Gives you the right to read, print, or copy a disk file. Read access 
automatically includes execute access to'a specified file or group of files on 
disk. 

Write Gives you the right to write to or change the contents of a file, but not 


delete it. Write access allows modification of the file characteristics that 
describe the contents of the file. 


Execute Gives you the right to execute a file that contains an executable program 
image or DCL command procedure. 


Delete Gives you the right to delete the file. To delete a file, you must have delete 
access to the file and write access to the directory that contains the file. 


Control Gives you the right to change file characteristics, including the protection 
code and ACL. Special restrictions apply to changing the owner of a file. 


If you do not define a protection code for a file when you create it, the system 
applies default protection. If a version of the file already exists, protection is 
taken from the previous version. 


For a new file, the system determines protection in two major ways: 


e Ifthe directory where the file is to be cataloged has an associated access 
control entry (ACE) that specifies the default protection, the system uses the 
specified protection. 


e Ifthe directory does not have the default protection ACE, the system uses 
the default process protection. You establish the default process protection 
explicitly with the SET PROTECTION/DEFAULT command, or by default 
when you log in. 


For disk volumes, each file on the volume can have a different protection 
associated with it. The SET PROTECTION command and other file-manipulating | 
commands allow you to define the protection for individual files. 
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Note 


To protect a file completely, you must protect both the file itself and the 
directory that lists the file. To protect a file against unauthorized access, 
specify the proper protection both for the directory that lists the file 
and for the file itself. See Section 9.3.4 for instructions on protecting 
directories. 


The following sections explain how to perform these operations: 


Operation For More Information 
Set default disk file protection Section 9.3.3.1 
Set explicit disk file protection Section 9.3.3.2 
Modify disk file protection characteristics Section 9.3.3.3 


9.3.3.1 Setting Default Disk File Protection 


<i> 


A new file receives default UIC-based protection and the default access control 
entries (ACKs), if any, of its parent directory. A new version of an existing file 
receives the UIC-based protection and ACL of the previous version. 


On VAX systems, the protection of a renamed file is unchanged unless you use 
the RENAME/INHERIT command. ¢ 


Following are explanations of how to change default UIC and ACL protection. 


9.3.3.1.1 Changing Default UIC Protection The operating system provides each 
process with a default UIC-based protection of (S:RWED,O:RWED,G:RE,W). To 
change the default protection, enter the SET PROTECTION/DEFAULT command 
using the following format: 


SET PROTECTION([=(code)|/DEFAULT 
where: 


code Defines the protection to be applied to the specified files. If you omit 
the code, the access is set to the current default protection. 


For example, if you place the following command in your login command 
procedure, you grant all processes read and execute access to any files that 
you subsequently create: 


$ SET PROTECTION = (S:RWED,O:RWED,G:RE,W:RE) /DEFAULT 


(Remember that you must execute the login command procedure for this 
command to take effect.) 


9.3.3.1.2 Changing Default ACL Protection You can override default UIC 
protection for specified directories or subdirectories by placing a Default 
Protection ACE in the ACL of the appropriate directory file. The default 
protection specified in the ACE is applied to any new file created in the specified 
directory or in any subdirectory of the directory. 


The following ACE, which must be in the ACL of a directory file, specifies that 
the default protection (for files created in the directory and its subdirectories) 
allows system and owner processes full access, group processes read and execute 
access, and world users no access: 


(DEFAULT PROTECTION, S:RWED,O:RWED,G:RE,W: ) 
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9.3.3.2 Setting Explicit Disk File Protection 
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You can explicitly specify UIC-based protection for a new file with the 
/PROTECTION qualifier (valid with the BACKUP, COPY, RENAME, and 
CREATE commands), as shown in the following command line: 


$ CREATE MAST12.TXT/PROTECTION=(S:RWED,O:RWED,G,W) 


After a file is created and you have created an ACL for the file, you can modify 
the ACL and add as many ACHs to the ACL as you want. The protection specified 
by the ACL overrides the UIC protection of the file. 


Following are examples showing how to check and specify protection codes. 
Examples 


1. $ SHOW PROTECTION 
SYSTEM=RWED, OWNER=RWED, GROUP=RE, WORLD=NO ACCESS 
In this example, the SHOW PROTECTION command displays the current 
default protection. The response is the system default protection. It indicates 
that the system and owner have all types of access, group users have read 
and execute access, and world users have no access. 


9. $ SHOW SECURITY IMAGES.DIR 


DBA1:[SADAMS]IMAGES.DIR;1 object of class FILE 
Owner: [SAM,SADAMS ] 
Protection: (System: RWE, Owner: RWE, Group: RE, World: E) 
Access Control List: 
( IDENTIFIER=[SAM, SADAMS ] , ACCESS=READ+WRITE+EXECUTE+DELETE+CONTROL ) 
In this example for VAX systems, the SHOW SECURITY command displays 
the current protection associated with the file IMAGES.DIR. ¢ 


3. $ DIRECTORY/SECURITY IMAGES.DIR 
Directory DBA1:[SADAMS] 


IMAGES.DIR;1 [VMS , SADAMS ] (RWE, RWE, RE,E) 
( IDENTIFIER=[ VMS , SADAMS ] , ACCESS=READ+WRITE+EXECUTE+DELETE+CONTROL ) 


Total of 1 file. 


In this example, the /SECURITY qualifier with the DIRECTORY command 
displays the current protection associated with the IMAGES.DIR file. 


4, §$ COPY/PROTECTION=(SYSTEM:RW,OWNER:RWED,GROUP:RW,WORLD) ABC.DAT 


In this example, the /PROTECTION qualifier specifies a protection code when 
you copy a file. 


5. $ SET PROTECTION=(SYSTEM:RWE,OWNER:RWED,GROUP:RE,WORLD) ABC.DAT 


In this example, the SET PROTECTION command changes the protection for 
an existing file. The command gives the following instructions regarding the 
file ABC.DAT: system users have read, write, and execute access; the owner 
has read, write, execute, and delete access; group users have only read and 
execute access; world users have no access. 


Control access is implied and unchangeable for system and owner categories 
but not for group and world. 
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9.3.3.3 Modifying Disk File Characteristics 
Table 9-3 shows the DCL commands that you can use to establish and modify the 
protection characteristics of files. 
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Table 9-3 DCL Commands to Modify File Protection Characteristics 


Command 


SET ACL 


SET 
DIRECTORY 


SET FILE 


SET 
PROTECTION 


SET 
PROTECTION 
/DEFAULT 


{SET 
SECURITY 


SET VOLUME 


tVAX specific 


Description 


Allows you to create or modify the access 
control list (ACL) of an object, including disk 
files. 


Modifies the characteristics of one or more 
directories. The directory protection can 
override the protection of individual files 
within the directory. 


Modifies the characteristics of one or more 
files, including the version limits on files. 


Establishes the protection that limits other 
users’ access to a file or a group of files. You 
can use the command to set the protection 
on individual files. (You cannot, however, use 
this command to change ACLs.) 


Sets the default UIC protection on files. 


Modifies the security profile of an object. Such 
a profile contains the following characteristics: 


e An access control list (ACL). 


e A protection code, which defines access to 
objects based on the categories of system, 
owner, group, and world. 


e An owner. The system uses the owner 
characteristic to interpret the protection 
code. 


Changes the characteristics of one or more 
mounted Files—11 volumes. The /FILE_ 
PROTECTION qualifier sets the default 
protection to be applied to-all files on the 
specified disk volume. 


For More Information 


See the OpenVMS DCL 
Dictionary and the 
Security Guide. 


See Section 9.3.4. 


See Section 9.3.3.3.2. 


See Section 9.3.3.1, 
Section 9.3.3.2, and 
Section 9.3.3.3.1. 


See the Security Guide. 


See the OpenVMS 
VAX Guide to System 
Security and the 
OpenVMS DCL 
Dictionary. 


See Section 8.4.1.2. 


For a complete list of the command qualifiers and parameters applicable to each 
of these DCL commands, see the OpenVMS DCL Dictionary. 


9.3.3.3.1 Changing File Protection Characteristics To change or reset the 
protection characteristics of one or more files, use the following format: 


SET PROTECTION[=code] file-spec,...] 


where: 


code 


Defines the protection to be applied to the specified files. If you omit 
the code, the access is set to the current default protection. 
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file-spec Specifies one or more files for which the protection is to be changed. A 


file name and file type are required. If you omit a version number, the 
protection is changed only for the highest existing version of the file. 
Wildcard characters are allowed. 


The following examples show ways to change file protection. 


Examples 


1, 


$ DELETE INCOME.DAT;3 

$DELETE-W-FILNOTDEL, error deleting DISK1:[SMITH]INCOME.DAT; 3 
-RMS-E-PRV, insufficient privilege or file protection violation 
$ SET PROTECTION=OWNER:D INCOME. DAT; 3 

$ DELETE INCOME.DAT;3 


In this example, the file INCOME.DAT;3 is protected against deletion. The 
SET PROTECTION command changes only the owner’s delete access for the 
file INCOME.DAT;3. Now the owner can delete the file. 


$ SET PROTECTION - 
$ PAYROLL.LIS/PROTECTION=(SYSTEM:R, OWNER: RWED,GROUP:RW) , - 


“$ PAYROLL. OUT/PROTECTION= (SYSTEM: RWED, GROUP: RWED, WORLD) 


In this example, the SET PROTECTION command changes the protection 
codes applied to two files. To the file PAYROLL.LIS, the command gives the 
system read access; the owner has read, write, execute, and delete access; and 
users in the owner’s group have read and write access. 


To the file PAYROLL.OUT, the command gives the system and group all types 
of access; the current access for the owner does not change, but the world is 
denied all types of access. 


$ SET PROTECTION A.DAT, B.DAT/PROTECTION=OWNER:RWED, C.DAT 


The command in this example specifies that the file A.DAT is to receive the 
default protection established for the owner’s files. The existing protection for 
the file B.DAT is overridden, for the owner category, to provide read, write, 
execute, and delete access. 


Note that no protection is specified for the file C.DAT at either the command 
or file level. Like A.DAT, C.DAT receives the default protection. Since this 
example specifies no version numbers, the protection settings affect only the 
highest versions of the three files. 


9.3.3.3.2 Using the SET FILE Command You can use the DCL command SET 
FILE to modify the characteristics of one or more files or to assign an additional 
name, or alias, to a file. The following examples illustrate ways you can use the 
SET FILE command. 


Examples 


1. 


$ SET FILE/EXPIRATION DATE=15-APR-1993:11:00 BATCH.COM;3 


This SET FILE command requests that the expiration date of the file 
BATCH.COM;3 be set to 11:00 A.M., April 15, 1993. 


$ SET FILE/BEFORE=15-APR-93/ERASE ON DELETE PERSONNEL*.SAL 


This SET FILE command calls for all files that match the file specification 
PERSONNEL*.SAL and that are dated before April 15, 1993. Disk locations 
are erased for files that are deleted with commands such as DELETE or 
PURGE. 


Using Files and Directories 
9.3 Protecting Files 


8. $ SET FILE/OWNER UIC=[DOCUMENTATION,GRAY]/VERSION LIMIT=100 MYFILE.DAT 


This SET FILE command modifies the characteristics of the file 
MYFILE.DAT, changing the owner UIC and assigning a file version limit 
of 100. Note that the /OWNER_UIC qualifier requires SYSPRV or GRPPRV 
privilege for changing the ownership at the system or group level. 


4. §$ SET FILE OLD FILENAME.DAT/ENTER=NEW FILENAME. DAT 


The command in this example assigns an additional name, or alias (NEW_ 
FILENAME.DAT), to the file OLD_FILENAME.DAT. Both the original name 
and the alias refer to the same file. For this reason, be careful when you 
delete files with aliases. To keep the file, but to remove one of its names, 
use the /REMOVE qualifier with the SET FILE command. You cannot use 
wildcards in the file name. (Refer to the OpenVMS DCL Dictionary for 
details.) 


9.3.4 Protecting Disk Directory Files 


Each directory has a protection associated with it. The directory protection can 
override the protection of individual files within the directory. For example, if a 
directory denies world access, world users cannot look up files in the directory 
that permit world access. 


For directory protection, you can use the access types shown in Table 9-4. 


Table 9-4 Access Types for Directory Protection 


Access 
Type Description 


Read Gives you the right to examine, print, or copy a file. If you have read 
access to a directory, you can display the contents of the directory with the 
DIRECTORY command. For example, if you have read access to the directory 
[JONES], you can enter the following: 


$ DIRECTORY [JONES] 


This command displays the files contained in the [JONES] directory. 


With read access, you can access any file listed in the directory, unless the 
protection on that file denies you access. If the protection applied to the whole 
directory denies you read access, then you cannot access even those files in 
the directory that permit access to users in your group. 


Write Gives you the right to modify or write to a directory. However, you must 
have both read and write access to a directory in order to create files in the 
directory, to rename files in the directory, or to perform any file operation that 
involves changes to the directory file. 


(continued on next page) 
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Table 9-4 (Cont.) Access Types for Directory Protection 


Access 
Type Description 


Execute Has a special meaning when applied to directories. Execute-only access to a 
directory allows you access only to files that you can identify by name. It also 
means that you can access files in the directory that are not protected against 
users in your category, provided that you do not perform an operation that 
modifies the directory. However, you cannot list all the entries in a directory 
by using wildcards. 


For example, assume you have execute-only access to the [JONES] directory, 
and you enter the following command: 


$ DIRECTORY [JONES] 


The system responds with an error message and does not list the files in the 
[JONES] directory. However, if you know that the file DATAFILE.DAT resides 
in the [JONES] directory, you can enter the following command: 


$ TYPE [JONES ]DATAFILE.DAT 


The system displays the contents of the file. Thus, with execute-only access, 
you can perform some, but not all, of the operations that you can with read 
access. 


Delete Gives you the right to delete a directory file. You must remove all entries 
from a directory before you can delete the directory file. When you create a 
directory with the CREATE/DIRECTORY command, you do not, by default, 
get delete access. If you want to be able to delete a directory file, you must 
use the DCL command SET PROTECTION to explicitly assign delete access 
to the owner category. 


Control Gives you the right to change the characteristics of a directory. 


The following sections explain how to perform these operations: 


Operation For More Information 
Use UIC directory protection Section 9.3.4.1 
Modify directory protection characteristics Section 9.3.4.2 


9.3.4.1 Using UIC Directory Protection 
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You cannot completely protect a file without applying at least the same protection 
to the directory in which the file resides. For example, if you deny a user all 
access to a file but allow that user read access to the file’s directory, the user 
cannot access the contents of the file but can see that it exists. Conversely, a 
user allowed access to a file and denied access to the file’s directory (or one of the 
parent directories) cannot see that the file exists. 


Note 


To protect sensitive files, the directory protection alone is not adequate. 
You must also protect each individual file contained within the directory. 
Section 9.3.3 contains instructions for protecting disk files. 


By default, top-level directories receive UIC-based protection 
(S:RWE,O:RWE,G:RE,W:E) and no ACL. A newly created subdirectory receives 
the same protection as its parent directory, but delete access is removed from all 
categories. 
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Following are guidelines for specifying UIC-based protection on a directory: 


¢ To specify UIC-based protection explicitly when creating a directory, use the 
/PROTECTION qualifier or the CREATE/DIRECTORY command. You cannot 
specify an ACL for the directory before you create the directory. 


¢ To change the UIC-based protection of an existing directory, use the SET 
PROTECTION command for the directory file. . 


¢ To specify or change the ACL of an existing directory, edit the directory file’s 
ACL using the EDIT/ACL command. (See the example in Section 9.3.3.1.) 


On VAX systems, you can use the SET SECURITY/ACL command to specify 
or change the ACL of an existing directory. ¢ 





¢ You can limit but not prohibit directory access by specifying execute access 
but not read access. Execute access on a directory permits you to examine 
and read files that you know are in the directory (that is, you know the 
file specifications) but prevents you from displaying a list of the files in the 
directory. 


9.3.4.2 Modifying Directory Protection Characteristics 


The DCL command SET DIRECTORY modifies the characteristics of one or more 
directories. 


Example 
$ SET DIRECTORY/OWNER_UIC=[360,020] [DAVIS], [USERS] 


The SET DIRECTORY command in this example modifies both the [DAVIS] 
and [USERS] directories, changing their owner UICs. Using the OWNER_UIC 
qualifier require SYSPRV (system privilege). 


9.3.5 Protecting Magnetic Tape Files 


Because tapes are single-user devices, tape protection is only at the volume level. 
The protection codes for magnetic tape volumes are usually assigned with the 
INITIALIZE command. 


You cannot use DCL commands to change protection characteristics on magnetic 
tape volumes. See Section 8.5.1 for more information. 


9.4 Accessing Disk Files 


This section describes how to use DCL commands to access files at the file level, 
not at the record level. This applies to reading files on disks, which is explained 
in this section, as well as to copying tape files, which is explained in Section 9.6.1. 


Although DCL does allow you to manipulate files at the record level, for reasons 
of performance, you probably want to use a conventional programming language 
instead. Digital recommends that you write programs using the OpenVMS 
Record Management Services (RMS) facilities, which are specifically designed to 
access files at the record level. You can write these programs in any higher-level 
language that the operating system supports. 


To access disk files at the file level, you can use DCL commands. You cannot, 
however, use DCL commands to read or write files that are not in the standard 
formats supported by the operating system. If the file formats are not standard, 
you must mount the volumes on which they reside with the /FOREIGN qualifier 
to have read and write access. 
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Although the examples used in this section show how to access disk files on RA90 
disk packs, they also apply to other devices. 


To read the contents of a disk file, use the DCL command TYPE, which displays 
the contents of a file on your terminal. To find the exact location of the disk file 
you want to read, use the DCL command DIRECTORY. 


How to Perform This Task 


If, for example, you want to read the contents of a file named HISFILE, which 
is located somewhere in the directory [CHARLES] on a disk device whose logical 
name is DISK$DOCUMENT, follow these steps: 


1. Look for the exact location of HISFILE by entering the following command: 
$ DIRECTORY DISKSDOCUMENT: [CHARLES...]HISFILE.* 


This command instructs the operating system to search the entire 
[CHARLES] directory, including all the subdirectories, for all file types and 
version numbers of HISFILE. 


The following information is displayed on your terminal: 


Directory DISKSDOCUMENT : [CHARLES . MEMO} 
HISFILE.UPD;1 
Total of 1 file. 


This display informs you that only one version of HISFILE exists, that its file 
type is UPD, and that it resides in the [CHARLES.MEMO)] directory. 


2. To read the contents of this file, enter the following command: 
$ TYPE [CHARLES .MEMO]HISFILE.UPD 


The contents of HISFILE are displayed on your terminal. 


9.5 Accessing Tape Files 
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This section describes file-level access for tapes. When you request access to a 
standard-labeled volume or a file, the operating system checks at the volume and 
file level to ensure that your process can access the volume or file. The level at 
which the system checks access depends on the operation you request and the 
type of access the operation requires. 


When you access a volume or a file, the operating system software reads the 
volume- and file-header labels to determine whether access to the volume or 
file is restricted. Which label is read depends on the operation requested. For 
example, if you want to mount a volume, your process must have access to it. 


The protection set on a file determines your access to the file. The expiration 
date field in the header can prevent you from overwriting or appending to a file 
immediately preceding the one in question. If the expiration date field has not 
been reached, a file has not expired. 


To overwrite an unexpired file, you must specify the /OVERRIDE=EXPIRATION 
qualifier when you mount the volume. You also need read or write access to 
perform this operation. 
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Following a section that explains tape file names are sections that tell how to 
perform these operations: 


Operation For More Information 
Locate standard-labeled tape files Section 9.5.2 
Use wildcards with tape files Section 9.5.3 
Read files on tape volumes Section 9.5.4 
Write files to tape volumes Section 9.5.5 


9.5.1 Understanding Tape File Names 
OpenVMS systems accept two types of file names for magnetic tapes: 
¢ OpenVMS extended names 


Use OpenVMS extended names if your files are to remain on media using 
only the OpenVMS operating system. 


e Standard names 


Use standard names if you want to move files to media on operating systems 
other than OpenVMS. 


Table 9-5 compares characteristics of OpenVMS extended names and standard 
names. 


Table 9-5 Comparison of OpenVMS Extended Names and Standard Names 


Characteristic OpenVMS Extended Names Standard Names 
Valid with... Tape and disk volumes Tape volumes 
Format filename.type;version filename.;version (version is 
optional) 
Length 39.39; 173 
Valid A through Z; 0 through 9; ASCII “a” characters enclosed in 
Characters ampersand (&), hyphen (-), quotation marks (""). If a name 
underscore ( _ ), dollar sign ($); has fewer than 17 characters, the 
wildcard characters asterisk (*) system pads the name on the right 
and percent sign (%) with spaces to the 17-character 
maximum size. 
Examples OPENVMS _ "AB2&D::FgHI*k4""#-M";2 
FILENAME.FILETYPE;23 


9.5.2 Locating Standard-Labeled Tape Files 


Before accessing a particular file for a read or write operation, you might want 
to search the magnetic tape volume for that file. You use the DCL command 
DIRECTORY to locate a file or group of files on a tape volume. 


When you specify a file name for a file residing on tape, the tape file system does 
the following: 


1. Compares the file name with the file header labels of each file until it finds a 
match in the file identifier field of the file header labels. 


e If you supply a version number in the file name, the magnetic tape 
file system compares it with the generation number and generation 
version-number fields in the first file header label. 
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¢ If you do not specify a version number, the system neither defaults 
a version number nor checks the generation number and generation 
version-number fields. 


2. The system selects the first file on the magnetic tape whose file name in the 
file identifier field matches the specified file name. 


The operating system supports neither the directory nor the latest version 
number concept for magnetic tape volumes. The system does not search for or 
list the latest version of a specified file. The magnetic tape file system cannot 
increment version numbers of files written to tape; therefore, two or more 
files in the same volume set can have the same file name and version number. 


Because the tape file system selects the first matching file name and version 
number (if specified), the position of the magnetic tape within the volume set 
determines which file is returned on a search operation. A search operation 
begins at the current position, so you might want to rewind the volume set 
before accessing a file. 


3. The search for a matching file and version number (if specified) continues at 
the beginning of the header-label set of the next file. The search ends when 
the magnetic tape is positioned at the file where the search began. 


If the system does not find the requested file on the current volume, it 
searches the remaining volumes in the volume set sequentially and then 
searches from the beginning of the first volume of the volume set. If the 
system still does not find the file name, it reports an error. 


9.5.3 Using Wildcard Characters with Tape Volumes 
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The OpenVMS operating system supports a limited use of wildcard characters in 
file specifications for tape volumes. 


Table 9-6 explains the use of wildcard characters with OpenVMS extended names 
and with standard names. 


Table 9-6 Wildcard Character Support with Tape Volumes 


OpenVMS 

Wildcard Extended Standard 

Character Names Names Description 

Asterisk (*) Xx X In OpenVMS extended names, you can use an 

asterisk anywhere in the file name and file 

type field to match a field or portion of a field. 
You can also use the asterisk in the version 
number field. 
In standard names, you can use only a single 
asterisk in a field. 

Percent sign (%) X In OpenVMS extended names, you can use 


a percent sign in a file specification only to 
match character positions within a field. You 
cannot use the percent sign in the version 
number field. 


Unlike OpenVMS extended names, which can consist of up to 39 characters 
each for the file name and file type, standard names can have a maximum of 17 
characters. 
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The following examples show how to use wildcard characters in file specifications 
to search for files on tape volumes. These examples also show how you can use 
the DIRECTORY command with tapes. Note that the DIRECTORY command 
does not work the same with tape files as with disk files. 


Examples 
1. $ DIRECTORY MFA1:*.*;* 


This command instructs the system to search a volume set. Because asterisks 
are used in the file specification and the asterisk is a valid wildcard character 
for both standard and OpenVMS extended names, the system returns both 
OpenVMS extended names and standard names. Note that the system 
returns tape file names within quotation marks. 


2. $ DIRECTORY MTA1:%*.*;* 
$ DIRECTORY MTAO:*.%*;* 


In these two commands, the search can match only with OpenVMS extended 
names because the percent sign is not valid for standard names. In the 


second command, the file type field must contain at least one character. Files 
with no file type are not returned. 


38. $ DIRECTORY MTA0:*.;* 


In this example, the DIRECTORY command instructs the system to search 
for files with both standard names and OpenVMS extended names that do not 
have a file type. 


9.5.4 Reading Files on Tape Volumes 


When you access a tape file for a read operation, the tape is positioned at the 
beginning of the file section after the file header labels. When you access a file 
residing on a tape volume only to read the attributes in the header labels (rather 
than the data in the file section), the tape file system returns the RMS attributes 
to your process. For example, when you specify the DIRECTORY/FULL command 
for a volume, file, or list of files, the tape file system does the following: 


1. Selects the file identifiers from the header labels 
2. Returns the file attributes to your process 
3. Positions the tape after the header labels of the last file accessed 


A tape file opened for read access is closed in either of the following ways: 


Method Description 


Implicitly The file is closed implicitly when the drive encounters a tape mark 
while the system reads a file. The tape file system then reads the 
trailer labels, closes the file, and positions the tape at the next file. 


Explicitly The file is closed explicitly when you finish accessing the file before all 
the data in the file is read. The tape file system then closes the file 
without reading the trailer labels, and the tape remains at the current 
position. 


Example 


You can use the DCL command TYPE to read a file or group of files on the tape 
volume and to display the contents of the file on your terminal. For example, if 
you want to read the contents of a file named TESTFILE.DOC;1 (which you know 
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from your directory searches is an OpenVMS file residing on the tape volume 
MTA1:), enter the following command: 


$ TYPE MTA1:TEST* .%*;* 
You then receive the following display on your terminal: 


MTA1:TESTFILE.DOC;1 


This is a test file. 


9.5.5 Writing Files to Tape Volumes 


When you write files to a tape volume, the tape file system performs access 
checks, writes labels, and, if necessary, switches volumes. 


9.5.5.1 Writing New Files That Overwrite Existing Files 


If a new file will overwrite an existing file, the tape file system does the following: 
1. Checks the expiration date and accessibility fields of the existing file. 
2. If overwriting is allowed, the tape file system does the following: 
a. Overwrites the header label set of the existing file 
b. Creates the file section 
c. Writes the trailer labels 
d. Writes two tape marks to denote the logical end-of-volume (EOV) 
All files following the newly created file are lost. 


To close a tape file that was opened for write access, the tape file system issues 
commands to the driver to write the labels, followed by a double tape mark that 
indicates the logical EOV. 


9.5.5.2 Appending or Updating Files 
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When you use DCL to access an existing file for a write operation, either an 
append or an update operation is actually performed. Following is a description 
of each operation. 


Access 

Method Description 

Append When you access a file for an append operation, the tape is positioned 
before the tape mark that precedes the trailer labels. After the file is 
appended and closed, all files beyond the appended file are lost. When the 
positioning is complete, the processing is handled as if the file had been 
created. 

Update When you access a file for an update operation, the tape is positioned after 


the tape mark that follows the header labels. After the file is written to 
and closed, all files beyond the updated file are lost. The processing is 
handled as if the file had been created. 


Note that you can update or append tape files only when the header label contains 
a value of 0 for the buffer offset length. For more information on how to update 
and append tape files, see Section 9.6. 


If you do not specify the /OVERRIDE=EXPIRATION qualifier when you update 
a file, the tape file system checks the expiration date field on the file before it 
allows you to write to that file. 
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In addition, before you append a file, the tape file system checks the expiration 
dates of both the file being appended and the file immediately following. If the 
expiration date of either file has not been reached, the magnetic tape file system 
does not allow you to append the file. 


Example 


You can use the CREATE command to access a volume for a write operation. The 
following CREATE command writes a new file to the tape volume: 


$ CREATE MTAQ:MYFILE 
After issuing a command like the one in this example, follow these steps: 
1. Enter the contents of the file. 


2. Press Ctrl/Z to close the file and write it to the tape volume without leaving 
the DCL command level. 


9.6 Copying and Transferring Files 


With the OpenVMS operating system, you can copy files on disks and tapes both 
within the system and across other operating systems. The OpenVMS operating 
system provides a number of facilities to assist you in both types of information 
transfer. 


Table 9-7 summarizes the methods you can use to transfer information. 


Table 9-7 Methods of Transferring Information 


Method Description 

DCL command COPY Most frequently used method for transferring information. 
Convert utility On a local system, allows you to change the organization of a 
(CONVERT) file from sequential to indexed, for example. 

Exchange utility On a local system, allows you to access disk and tape volumes 
(EXCHANGE) that are formatted for operating systems other than OpenVMS. 


You can use EXCHANGE to transfer files between foreign 
volumes and standard Files—11 volumes. 


DCL command Allows you to transfer files via the network between OpenVMS 
EXCHANGE and other operating systems. The command is useful when 
/NETWORK you need to transfer files between an OpenVMS node and a 


non-OpenVMS node. The file is copied in such a way that it is 
meaningful on OpenVMS and other operating systems as well. 


Backup utility With tapes, the only means of copying entire directory trees or 
(BACKUP) files that are not sequentially structured. See Section 10.13.2 
for information on using BACKUP to copy files. 


The COPY command, the Exchange utility, and the DCL command EXCHANGE 
/NETWORK are explained in the following sections. 


i 
In many cases, you can copy information without physically transporting media. 
You might, however, need to copy files between systems that are not connected 
by a communications link. If so, you must be able to move your files physically 
from one location to another. A convenient way is to copy your files to a portable 
volume, such as a tape reel, tape cartridge, or disk pack, and then carry that 
volume to the location of the other system. 
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The following sections describe how to perform these operations: 


Operation For More Information 
Copy files to disk volumes Section 9.6.1 
Copy files to tape volumes Section 9.6.2 
Continue to copy at the end of a tape Section 9.6.3 
Use the Exchange utility to copy files Section 9.6.4 


Use the DCL command EXCHANGE/NETWORK to transfer Section 9.6.5 
files over a network 


9.6.1 Copying Files to Disk Volumes 


9-20 


Before you can copy files to a disk volume, you must do the following: 
1. Prepare the volume, as explained in Section 8.1.3.2. 


2. Because disks are random-access devices, and because files must be listed 
in directories, you must create a directory to contain your files on the disk 
volume after you initialize the volume. 


Copying from Disks 


The default format for files on disk volumes is Files—11 Structure Level 2. You 
can also initialize disks in the Files—11 Structure Level 1 format, which is the 
format used by other Digital operating systems, including RSX-11M, RSX-— 
11M-PLUS, RSX-11D, and IAS. 


When you copy files from disks to standard-labeled disk volumes, the following 
items are not preserved: 


e Directory specifications 

e Individual file protections 

e User identification codes (UICs) 

e Creation times (but the dates are preserved) 
e Revision and backup dates and times 


You can use the COPY command to copy the highest version of all the files in 
your default directory to another directory on that volume. 


Copying from Tapes 

The default format for files on tapes is the standard-labeled volume. The 
OpenVMS system supports sequential, relative, and indexed files on disks, 

but you can copy only sequential files to standard-labeled disk volumes. The only 
valid record formats are variable-length and fixed-length. 


When you copy files with tape file names from magnetic tape to disk, specify a 
standard OpenVMS file name for the output file name specification. If you do 
not specify an OpenVMS file name on output, your process receives the following 
error message: 


RMS-F-FNM, error in file name 
This message indicates that the tape file name is not a valid OpenVMS file name. 


If you enter the COPY command with the /LOG qualifier, the system sends a 
message to the current SYS$OUTPUT device after each file has been copied. To 
verify that the files were successfully copied, use the DIRECTORY command. 
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Examples 


1. 


$ CREATE/DIRECTORY DMA3: [PUBS] 
$ DEFINE P DMA3:[PUBS] 

$ COPY *.* P 

$ COPY [PRIMER]*.* P 

$ COPY [COMMANDS]*.* P 


The CREATE/DIRECTORY command in this example creates a disk directory 
file named [PUBS] on DMAS3:, and the DEFINE command defines the logical 

name P as DMA3:[PUBS]. The COPY command copies the highest version of 
each file in the current default directory and in the directories [PRIMER] and 
[COMMANDS] to the newly created directory. 


$ COPY *.* DMA5: [PRIVATE] 


For this example, assume that the disk device DMA5: has been allocated to 
your process and that a disk volume has been initialized and mounted on 
that device. Also assume that you have a directory called PRIVATE already 
created on that volume. 


$ COPY/LOG MTA1:"%&*?!SKI! """ SEASON.DAT 
SCOPY-S-COPIED, MTA1:[]"S&*2?!SKI! """.31 
copied to WRKD: [MANUAL]SEASON.DAT;1 (120 records) 


The command in this example copies the tape file 2&*?!SKI!#" (# 

means space) to the file SEASON.DAT on the default disk and directory, 
WRKD:[MANUAL]. To copy the file to disk, you must you specify a new file 
name. (The OpenVMS software provides defaults for segments of the file 
specification that are not specified.) 


Because this example specifies the /LOG qualifier, the system returns a 
message that confirms the file was copied from the MTA1: tape volume; the 
message also tells how many records were copied. 


$ COPY/LOG MTA0:*.* * 

SCOPY-S-COPIED, MTAQ:[ ]TASTETEST.DAT;1 

copied to WRKD:[FOOD]TASTETEST.DAT;1 (249 records) 

$COPY-S-COPIED, MTA0:[]ALLAT;1 copied to WRKD:[FOOD]ALALL;1 (48 records) 
SCOPY-S-NEWFILES, 2 files created 


In this example, the COPY/LOG command specifies wildcard characters for 
the file name and file type. Therefore, the system copies the only two files on 
the tape volume to the disk volume. 


$ COPY/LOG MTA1:*.* [EX] 
SCOPY-S-COPIED, MTA1:[].DAT;1 copied to WRKD:[EX]TEST.DAT21 records) 


$COPY-E-OPENOUT, error opening WRKD:[EX]"$&*()!SKI! """.;1 as output 
-RMS-F-FNM, error in file name 
SCOPY-W-NOTCOPIED, MTA1:[]"%&*()!SKI! """.:1 not copied 


SCOPY-E-OPENOUT, error opening WRKD: [EX]"SANFRAN$%$""".;1 as output 
-RMS-F-FNM, error in file name 

%COPY-W-NOTCOPIED, MTA1:[]"SANFRAN$%$""".:1 not copied 

tCOPY-S-COPIED, MTA1:[]OPENVMS LONGSFILE NAME.LONG EXT; 1 

Copied to WRKD$:[EX]OPENVMS LONGS$FILE NAME.LONG EXT;1 (80 records) 
SCOPY-S-COPIED, MTA1:[]C6.J0U;1 copied to WRKD:[EX]C6.JOU;1 (4 records) 
$COPY-S-NEWFILES, 2 files created) 


The COPY/LOG command string specifies that all files on the volume 
mounted on tape volume MTA1: are to be copied to the current default 
disk and directory WRKD:[EX]. However, the system does not copy files with 
tape file names, but, instead, returns an error message. 
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9.6.2 Copying Files to Tape Volumes 
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You can use the COPY command to copy files from a disk volume to a tape 
volume. The procedures are similar to those for copying files from one disk 
volume to another. One difference, however, is that magnetic tapes are 
sequential-access devices and do not have directories. You must set up (initialize 
and mount) a tape device before copying disk files to a tape volume. (The 
characteristics of tape files are described in Section 9.5.) 


The entire set of Files—11 file names is supported for magnetic tapes. You can 
copy a disk file with the following file name to a magnetic tape volume without 
having to modify the file name: 


THIS ISSAN_OPENVMSLONG FILE.LONG TYPE 


Note 


Most non-OpenVMS systems do not use file names longer than 17 
characters. 


Although the OpenVMS system supports stream and variable with fixed-length 
control (VFC) records, it encodes these records in a variable-length format on 
standard-labeled volumes. Non-OpenVMS systems do not distinguish stream 
records or VFC records from variable-length records; instead, they interpret both 
as variable-length records. Therefore, do not create either stream or VFC records 
on volumes that will be used for information interchange to a non-OpenVMS 
system. 


The following steps show how to use DCL commands to copy files from a default 

directory on a disk volume to a standard-labeled magnetic tape volume. Included 
in the steps are examples showing how to allocate, initialize, and use a magnetic 
tape to copy a set of your disk files. 


How to Perform This Task 


To copy files from a default directory on a disk volume to a standard-labeled tape 
volume, follow these steps: 


1. First, allocate a drive as follows: 


$ ALLOCATE MT: TAPE DEVICE 
%DCL-I-ALLOC MARSS$MTA2: allocated 


This ALLOCATE command requests the allocation of a tape drive whose 
name begins with MT. The logical name TAPE_DEVICE in this case refers to 
the MARS$MTA2: drive. 


The system response indicates that unit 2 on controller A was available and 
is now allocated to you. You can now physically load the tape on the drive. 
Be sure the write ring on the tape is in place; if it is not, you cannot write to 
the tape. 


2. Initialize the tape by entering a command like the following: 
$ INITIALIZE TAPE DEVICE: GMB001/PROTECTION=(GROUP:R,WORLD) 


The INITIALIZE command specifies the logical name for the volume (TAPE_ 
DEVICE, which in this case refers to MTA2:) and the volume label for the 
tape volume (GMBO001). The label can be no longer than six characters. The 
/PROTECTION qualifier defines a protection code restricting group access to 
read and allowing no world access. 


3. 
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Enter the MOUNT command to mount the volume and write files to it, as in 
the following example: 


$ MOUNT TAPE DEVICE: GMB001 
$MOUNT-I-MOUNTED, GMB001 mounted on MTA2: 
$ COPY *.* TAPE DEVICE: 


The MOUNT command specifies the device name and volume label of the 
volume on the device. The COPY command copies the highest version of each 
file in your default directory onto the tape. The file names, file types, and 
version numbers of the output files default to the same file names, file types, 
and version numbers as the input files. 


If you enter the COPY command with the /LOG qualifier, the system sends a 
message to the current SYS$OUTPUT device after it copies each file. 


You can also use the DIRECTORY command to verify that the files were 
copied successfully. 


$ DIRECTORY TAPE DEVICE: 


This DIRECTORY command lists the file names and file types of all files on 
the tape. 


When you finish using the magnetic tape, dismount and deallocate it as 
follows: 


$ DISMOUNT TAPE DEVICE: 
$ DEALLOCATE TAPE DEVICE: 


If you do not dismount and deallocate the magnetic tape, the system does so 
automatically when you log out. 


The following examples illustrate ways of copying files to tape volumes. 


Examples 


1, 


$ COPY *.* MTA2: 


For this example, assume that MTA2: has been allocated to your process and 
that a tape volume has been initialized and mounted on that device. The 
COPY command writes files to the MTA2: tape volume. 


The highest versions of all files in your default disk directory are copied to the 
tape volume. The file names, file types, and version numbers of the output 
files default to the same file names, file types, and version numbers as the 
input files. 


$ COPY/LOG FORTAP.DAT MTA1:"$&*?!SKI!} "" " 
$COPY-S-COPIED, WRKD: [MANUAL]FORTAP.DAT;1 
copied to MTAL:[]"%&*?!SKI! """.;0 (120 records) 


In this command for copying from disk to tape, a tape file name is specified 
as the output file specification. Note that the trailing space in the file name 
%&*?|SKI##'# (where # means space) is not present because trailing spaces 
are not significant in tape names. 


$ COPY/LOG OPENVMS LONGSFILE NAME.LONG EXT MTA1: 
$COPY-S-COPIED, WRKD: [MANUAL]OPENVMS LONGSFILE NAME EXT;1 
copied to MTA1:OPENVMS LONGSFILE NAME.LONG EXT;1 (80 records) 


In this example, a long file name with a long file type is copied to the tape 
volume MTA1: with the same file name and type as on the disk volume. 
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4, § COPY/LOG %%.JOU;* MTA1:*.* 
$COPY-S-COPIED, WRKD:[MANUAL]C6.J0U;1 copied to MTA1:[]C6.J0U;1 (4 records) 


In this example, all files with a two-character file name and a file type of 
JOU are copied to the tape volume MTAI1: with the same file name and type 
as on the disk volume. Version numbers are preserved. 


9.6.3 Continuing to Copy at the End of a Tape 


When you are copying to or from a tape and that tape reaches the end, the system 
suspends processing and sends a request to mount the next tape in the volume 
set. An Operator Communication Manager (OPCOM) message similar to the 
following is displayed at the terminal: 


SESESESEESB OPCOM, 14-JUN-1993 15:23:31.78 %%8%333%%3%% 
request 3, from user PLAW 
MOUNT new relative volume 2 (DWOQT2) on MTA1: 


a et INGO es, 


Because messages are sent only to the operator’s terminal that is enabled 
for tape messages, you do not usually see this message and might 

not realize that another tape is needed to complete the read or write 
operation. 


See Section 17.5 for more information on OPCOM messages. 


If automatic volume switching is disabled or if the tape file system cannot mount 
a given volume, you might need to mount a continuation volume in a volume set. 
See Section 8.8.2 for information on mounting continuation volumes. 


9.6.4 Using the Exchange Utility (EXCHANGE) 


The Exchange utility (EXCHANGE) converts the format of files, as appropriate, 
when copying files between volumes of different structures. EXCHANGE 
recognizes all Files—11 and RT-11 disk volumes on OpenVMS devices, as well as 
all DOS—11 and RT-11 formatted volumes on 9-track tape devices. 


For more information on how to use EXCHANGE and for a description of all 
EXCHANGE commands, qualifiers, and parameters, see the OpenVMS Exchange 
Utility Manual. 


9.6.5 Using the EXCHANGE/NETWORK Command 
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You can use the DCL command EXCHANGE/NETWORK to transfer files to 
and from operating systems that do not support OpenVMS file organizations. 
This transfer occurs over a DECnet network communications link that connects 
OpenVMS and non-OpenVMS operating system nodes. 


Using the EXCHANGE/NETWORK command, you can perform the following 
operations: 


e ‘Transfer files between an OpenVMS node and a non-OpenVMS node. 
¢ Transfer a group of input files to a group of output files. 


e Transfer files between two non-OpenVMS nodes, provided those nodes share 
DECnet connections with the OpenVMS node that issues the EXCHANGE 
/NETWORK command. 


For details on using the EXCHANGE/NETWORK command, refer to online help 
or the OpenVMS DCL Dictionary. 
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How to Perform This Task 
To issue the EXCHANGE/NETWORK command, use the following format: 


EXCHANGE/NETWORK input=filespec[,...) output-filespec 
where: 


input-filespec Specifies the name of an existing file to be transferred. (Wildcard 
characters are allowed.) : 


output-filespec Specifies the name of the output file into which the input is to be 
transferred. 


Example 
$ EXCHANGE/NETWORK MYSYS FILE.DAT FOO::FOREIGN SYS.DAT 


The command in this example transfers the file MYSYS_FILE.DAT, which is 
located in the current default device and directory, to the file FOREIGN_SYS.DAT 
on the non-OpenVMS node FOO. By default, the command automatically 
determines whether the transfer method should be block or record I/O. 
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Using BACKUP 


You can guard against data loss or corruption by using the OpenVMS Backup 
utility (BACKUP) to create copies of your files, directories, and disks. In case of a 
problem—for example, a disk drive failure—you can restore the backup copy and 


continue your work with minimal disruption. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task 


Formulating a BACKUP strategy 
Setting up a BACKUP account 


Using disks and tapes (initializing, mounting, and 
dismounting) 


Requesting operator assistance 

Listing the contents of a BACKUP save set 

Backing up user disks (image and incremental) 

Using a command procedure for nightly image backups 


Using a command procedure for nightly incremental 
backups 


Using an interactive command procedure for backups 
Backing up volume shadow sets 

Restoring user disks (image and incremental) 
Restoring volume shadow sets 

Backing up and restoring the system disk 
Building standalone BACKUP 

Booting standalone BACKUP 

Backing up the system disk to tape 
Restoring the system disk from tape 

Backing up the system disk to a disk 
Ensuring data integrity 

Troubleshooting 


This chapter explains the following concepts: 


Concept 


Types of backups 


Section 


Section 10.3 
Section 10.7 
Section 10.8 


Section 10.9.1 
Section 10.10 
Section 10.15 
Section 10.15.6.1 
Section 10.15.6.2 


Section 10.15.6.3 
Section 10.15.7 
Section 10.16 
Section 10.16.3 


. Section 10.17 


Sections 10.17.1 and 10.17.3 
Sections 10.17.2 and 10.17.4 
Section 10.17.5 

Section 10.17.6 

Section 10.17.7 

Section 10.18 

Section 10.19 


Section 


Section 10.2 
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Concept Section 

The BACKUP command line Section 10.4 
Save sets Section 10.5 
BACKUP file formats Section 10.6 
Volume initialization Section 10.8.1 
OPCOM and volumes Section 10.9 
Multivolume BACKUP operations Section 10.11 
BACKUP tape label processing Section 10.12 


10.1 Overview of BACKUP Tasks 


For BACKUP to be an effective safeguard against data loss, you must back up 
important data on a regular basis. You must also be familiar with how to restore 
the data if needed. 


Besides backing up your own files, directories, and disks, you should back up your 
system disk. If you have a standalone workstation, backing up the system disk is 
probably your responsibility. If your system is part of a large clustered computer 
system, an operator or system manager is probably responsible for backing up the 
system disk. To back up a system disk, you use a special version of the OpenVMS 
Backup utility called standalone BACKUP. Standalone BACKUP is described in 
Section 10.17. 


Performing an image backup using BACKUP also eliminates disk fragmentation. 
Fragmentation can occur as you create and extend files on a disk. If the file 
system cannot store files in contiguous blocks, it stores them in noncontiguous 
pieces. Eventually, the disk can become severely fragmented and system 
performance suffers. 


To eliminate fragmentation, perform an image backup of the disk and restore the 
backup copy. When you restore the image backup, BACKUP places the files on 
the disk contiguously. Alternatively, you can perform a disk-to-disk image backup 
without using the /SAVE_SET qualifier. This creates a functionally equivalent 
copy of the entire system disk, on which files are stored contiguously. 


Note 


Some layered products have their own special backup procedures. For 
more information, see the layered product documentation. 


10.2 Understanding Types of Backups 


There are several types of backup operations: 
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Operation Description 

File operation Processes individual files or directories. Section 10.13 describes file . 
operations. 

Selective Processes files or volumes selectively, according to criteria such as 

operation version number, file type, UIC, date and time of creation, expiration 


date, or modification date. 


Perform selective save operations by using wildcard characters and 
input file-selection qualifiers (for example, /BACKUP, /BEFORE, 
/BY_OWNER [/OWNER_UIC], /CREATED, /EXCLUDE, /EXPIRED, 
/MODIFIED, and /SINCE). Section 10.13 describes selective operations. 


Physical Copies, saves, restores, or compares an entire volume in terms of logical 
operation blocks, ignoring any file structure. 

Image Processes all files on the input disk. There are several types of image 
operation operations: 


— An image backup (also called a full backup) saves a copy of all 
the files on a disk (or volume) to a special file called a save set. 
The first backup that you do on a disk must be an image backup; 
you cannot perform an incremental backup first. 


— An image restore initializes the output disk and restores an 
entire volume. 


— An image copy operation initializes the output disk and copies 
an entire volume; the image backup is a logical duplicate of the 
contents of the disk. 


— An image compare operation compares the contents of entire 
volumes. 


Because an image copy or backup operation processes all files on the 
input volume, you cannot specify file-selection qualifiers for these 
operations. You can, however, restore files and directories selectively 
from an image save set. 


Incremental There are two types of incremental operations: 


operation 
- An incremental backup saves only those files that have been 


created or modified since the most recent backup that was 
performed using the /RECORD qualifier. (The (RECORD qualifier 
records the date and time that the files are backed up.) 


— An incremental restore operation restores an incremental 
save set. Specify the command qualifier INCREMENTAL in 
an incremental restore operation. Section 10.16.2 describes 
incremental restore operations. 


10.3 Formulating a Backup Strategy 


When formulating a backup strategy, keep in mind the specific requirements of 
your site and the advantages and disadvantages of the different types of backups. 
Your backup strategy also depends on the following factors: 


e The resources you can devote to backups 
e The importance of the data 
¢ The volatility of the data 


For example, if you have a standalone workstation, you might conclude that a 
nightly image backup is your best approach. 
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Under other circumstances, you may want to choose some combination of 

image and incremental backups. For example, daily image backups might 

be inconvenient if your system always has interactive users logged in (see 
Section 10.15.1). You could choose to perform a weekly image backup and nightly 
incremental backups. 


Table 10-1 compares image and incremental backups. 


Table 10-1 Comparison of Image and Incremental Backups 


Backup Type Advantages Disadvantages 

Image Faster to restore than Uses more space and time 
incremental backups. Backs than incremental backups. 
up entire disk. Requires that no interactive 


users are logged in because 
of the effect on system 
performance and because of 
open file considerations (see 
Section 10.15.1). 


Incremental Takes less time and media More difficult to restore files. 
storage space. Still requires periodic image 
backups. 


You do not have to change tapes or disks during a backup if any of the following 
are true: 


e All of the files fit on a single piece of storage media. 
e Your site uses a tape loader. 
e You have several disk or tape drives available. 


In these cases, the backup can be performed by a batch job that runs late at 
night or at some other time when interactive use of the system is likely to be at a 
minimum. Section 10.15.6 contains some sample command procedures that you 
can run in a batch job to back up your disks. 


10.4 Understanding the BACKUP Command Line 


To back up files, you must specify what you want to back up (the input) and 
where you want BACKUP to place the resultant save set or file (the output). You 
can also use BACKUP qualifiers to perform different functions depending upon 
their position on the command line: 


BACKUP/qualifiers input_specifier/qualifiers output_specifier/qualifiers 
Table 10—2 lists the types of BACKUP command qualifiers. 


Table 10-2 BACKUP Command Qualifier Types 


Type Position Effect 
Command Anywhere on the Affects both input and output specifiers. 
qualifier command line 


Input specifier Directly after the input Affects only the input specifier. 
qualifier . specifier 


(continued on next page) 


Using BACKUP 
10.4 Understanding the BACKUP Command Line 


Table 10-2 (Cont.) BACKUP Command Qualifier Types 
Type Position Effect 


Output specifier Directly after the output Affects only the output specifiers. 
qualifier specifier 


When you use BACKUP, make sure you place BACKUP qualifiers in their 
correct position on the command line. For more information about the BACKUP 
command line, see OpenVMS System Management Utilities Reference Manual. 


10.5 Understanding Save Sets 


When you enter a BACKUP command to save files to a tape, BACKUP writes the 
files to a special file called a save set. You can also create a save set on a disk 
using the /SAVE_SET qualifier. Save sets are classified according to the media on 
which they reside. Table 10-3 lists the types of media that you write a save set 
to. 


Table 10-3 Save-Set Types 


Media Type For More Information 
Magnetic tape Section 10.5.1 
Files—11 disk Section 10.5.2 


Files—11 disk on a remote node Section 10.5.3 
(network save set) 


Sequential disk Section 10.5.4 


10.5.1 Magnetic-Tape Save Sets 


Magnetic tape is the most commonly used media for storing BACKUP save sets. 
It is less expensive than disk media, and its compact size makes it easy to store. 
You can use more than one tape device at a time to save or restore data; this 
allows processing to continue on another tape while the one most recently used is 
rewinding. 


BACKUP treats all magnetic tape files as BACKUP save sets. Because you 
cannot use save-set specifications as both the input and output specifiers in a 
BACKUP command line, you cannot perform a BACKUP operation from one 
magnetic tape to another. 


Digital recommends that you copy magnetic-tape save sets to disk with the 
BACKUP command; however, you can use the DCL command COPY on magnetic- 
tape save sets that were created with the INTERCHANGE qualifier. 


Save-set specifications on magnetic tape are limited to 17 characters, including 
the period delimiter (.) and file type. The following is a valid save-set 
specification: 


WKLY27JAN1993.BCK 


When restoring data from tape, if you do not include a save-set name with an 
input magnetic tape, BACKUP reads the next save set it encounters on the tape. 
(If you specify the input save-set qualifier /REWIND, BACKUP rewinds the tape 
and reads the first save set on the tape.) 


10-5 


Using BACKUP 
10.5 Understanding Save Sets 


10.5.2 Files—11 Disk Save Sets 


To write save sets on a Files—11 disk, you must include the output save-set 
qualifier /SAVE_SET. The /SAVE_SET qualifier indicates to BACKUP that you 
want to create a save set, rather than a copy of the selected files, on the output 
volume. The disk must be mounted as a Files—11 volume; all volumes in a volume 
set must be mounted. 


BACKUP can read a Files—11 save set as a Files—11 save set or as a sequential- 
disk save set: 


e When BACKUP reads a save set as a Files—11 save set, all volumes of the 
save set must be mounted. To read a save set that is not located in your 
process default directory, you must specify the directory in which the save set 
is located. 


e When BACKUP reads a Files—11 save set as a sequential-disk save set, 
you can mount the volumes one at a time. You must specify the master file 
directory [000000] in the save-set specification when reading a Files—11 save 
set as a sequential-disk save set. 


A save set stored on a Files—11 disk is a standard file, however, and can be copied, 
renamed, deleted, or backed up. . 


10.5.3 Network Save Sets 


You can create or read a network save set on a Files—11 disk attached to a remote 
node by specifying the node name of a remote node in the save-set specification. 
A remote node is a node that is accessible to the node you are working on (the 
host node) over a network. The network save set must be located on a publicly 
accessible disk (a disk mounted from the remote node with the /SYSTEM, 
/GROUP, or /CLUSTER qualifier) on the remote node. 


Depending on the volume and file protection at the remote node, you may need 
to specify an access control string in the network save-set specification. An 
access control string includes the user name and password, and has the following 
format: 


remote_nodename"username password"::device_name:|directory] 


Example 
The following example creates a network save set on the remote node DOUBLE: 


$ BACKUP 
_FROM: [{MY_DIR] 
_TO: DOUBLE"username password": :DBA0:SAVEIT.BCK/ SAVE_SET 


Omit the access control string if it is not required to gain access to the remote 
node, such as in the case of proxy network access. See the DECnet for OpenVMS 
Networking Manual for more information about access control strings and proxy 
network access. 


10.5.4 Sequential-Disk Save Sets 
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Sequential-disk save sets allow you to treat a Files—11 disk volume sequentially, 
(like a magnetic tape volume). The primary advantage of using sequential-disk 
save sets is that you can mount multivolume save sets one volume at a time. 
This is particularly useful on systems without tape drives that have a large 
fixed-media disk and a small removable disk. 
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When one sequential disk is full, BACKUP prompts you to mount another disk. 
You can use more than one disk device at a time to save or restore data; this 
allows processing to continue on another disk while the one most recently used is 
spinning down. 


You need the privilege LOG_IO or PHY_IO to read or write a multivolume 
sequential-disk save set. 


Before creating a sequential-disk save set, mount the first volume of the 
sequential-disk save set using the DCL command MOUNT/FOREIGN. Although 
the disk is mounted with the /FOREIGN qualifier, BACKUP manages the disk 
using Files—11 structure. 


When you perform a save operation to a sequential disk, you must use the output 
save-set qualifier /SAVE_SET. When you perform a restore operation from a 
sequential disk, you must specify the input save-set qualifier /SAVE_SET. If you 
do not specify the /SAVE_SET qualifier, BACKUP displays the following error 
message: 


tBACKUP-F-IMGFILSPE, /IMAGE specification must only have device name 


Do not specify a directory name for the save set; sequential-disk save sets are 
always entered in the master file directory [000000]. Even if you specify a 
directory other than the master file directory in a save operation, the save set 
is entered in the master file directory. If you specify a directory other than the 
master file directory in a restore or list operation, BACKUP returns an error 
message indicating that it cannot locate the file. 


BACKUP does not initialize the first sequential-disk volume because the default 
is /NOINITIALIZE; however, continuation volumes are initialized. Unless you 
specify the command qualifier /INITIALIZE, the following restrictions apply to 
the first sequential-disk volume: 


e The disk must be Files—11 Structure Level 2. 
e The disk must not be part of a volume set. 
e The cluster factor of the disk must be 1. 


¢ The free space on the disk cannot be fragmented into more than 100 
contiguous extents. 


e The index file cannot be extended. 
e The master file directory cannot be extended. 


Volumes you use for sequential-disk save sets should contain only save sets. You 
must initialize a volume that has been used for general file processing before 
using it as a sequential-disk volume. You can place a maximum of 12 save sets on 
a single sequential disk. Use Files—11 disk save sets if you want to create more 
than 12 save sets on a single disk. 


BACKUP can read a sequential-disk save set either as a sequential-disk save set 
or as a Files—11 save set: 


e When BACKUP reads a save set as a sequential-disk save set, the save set 
can be mounted one volume at a time. The default directory for the save set 
file specification is the master file directory [000000] on the disk. 
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e When BACKUP reads a save set as a Files—11 save set, all volumes of the 
save set must be mounted. The default directory is your process default 
directory. Therefore, you must specify the master file directory [000000] in 
order to read a sequential-disk save set as a Files—11 save set. 


10.6 Understanding BACKUP File Formats 


AXP | 


BO 


Note 


The OpenVMS AXP operating system does not support the Files—11 
Structure Level 1 format. ¢ 


On VAX systems, BACKUP saves files and directories from Files—11 Structure 
Level 1 and 2 disks to disks or magnetic tapes. If necessary, you can use 
BACKUP to restore the saved files and directories to Files—11 Structure Level 1 
and 2 disks. ¢ 


On AXP systems, BACKUP saves files and directories from Files—11 Structure 
Level 2 disks to disks or magnetic tapes. If necessary, you can use BACKUP to 
restore the saved files and directories to Files—11 Structure Level 2 disks. ¢ 


You cannot back up files on ISO 9660-formatted media, but you can restore save 
sets stored on ISO 9660-formatted media. If you need to process files on ISO 
9660-formatted media, copy the files to a Files—11 disk and use the Librarian 
utility. . 


For more information about the Files—11 disk structure, see Section 8.1.1.2. For 
more information about ISO 9660 devices, see Section 7.2.1. 


10.7 Setting Process Quotas for Efficient Backups 
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You can optimize the efficiency of backups on your system by properly setting 
the process quotas for the process from which backups will be made (the process 
from which you enter the BACKUP command or submit your backup command 
procedure). This is especially important if you are using a streaming tape drive. 


How to Perform This Task 
To set process quotas for efficient backups, do the following: 


1. Determine which account you want to use for backups. You can use an 
existing account, or create one solely for backups. For information about 
creating accounts, see Section 6.5. 


2. Use the Authorize utility (AUTHORIZE) to determine the current quota 
values for for the account you will use for backups. For example, if you are 
using the SYSTEM account for backups, enter the following commands: 


$ SET DEFAULT SYSSSYSTEM 
$ RUN AUTHORIZE 
UAF> SHOW SYSTEM 


3. Using the System Management utility (SYSMAN), determine the value of the 
system parameters WSMAX and CHANNELCNT, as follows: 
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$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> PARAMETERS SHOW WSMAX 

$SYSMAN-I-USEACTNOD, a USE ACTIVE has been defaulted on node DIEM 
Node DIEM: Parameters in use: ACTIVE 


Parameter Name Current Default Minimum Maximum Unit Dynamic 
WSMAX 2600 1024 60 100000 Pages 

SYSMAN> PARAMETERS SHOW CHANNELCNT 

Parameter Name Current Default Minimum Maximum Unit Dynamic 
CHANNELCNT 127 127 21 2047 Channels 
SYSMAN> EXIT 

3 


In this case, the values for WSMAX and CHANNELCNT, as shown in the 
column marked Current, are 2600 and 127, respectively. You need these 
values to help you set the proper values for the process quotas. 


Use AUTHORIZE to compare the values for the process quotas to the 
recommended values for efficient backups, as shown in Table 10-4. 


Table 10-4 Recommended Process Quotas for Efficient Backups 


Process Quota Recommended Setting 

WSQUOTA Equal to system parameter WSMAX 

WSEXTENT Equal to WSQUOTA quota 

PGFLQUOTA Equal to or greater than WSEXTENT quota 

FILLM Less than system parameter CHANNELCNT 

DIOLM Either 4096 or three times the value of FILLM quota, 
whichever is greater 

ASTLM Either 4096, equal to DIOLM quota, or three times the value 
of FILLM quota, whichever is greater 

BIOLM Equal to FILLM 

BYTLM Equal to or greater than the following value: (256 * FILLM) + 
(6 « DIOLM) 

ENQLM Greater than FILLM quota 

5. If necessary, change process quotas using the AUTHORIZE command 


MODIFY. If you change process quotas, you must log out and log in again 
for the changes to take effect. For information on changing these process 
quotas, see Section 6.7. 


Table 10-5 lists a set of process quota values that are appropriate for many 
configurations. If your disks are highly fragmented or if your backups will be 
performed during periods of heavy system use, you should reduce the values 
shown for WSQUOTA and FILLM. 


Table 10-5 Sample Process Quotas for Efficient Backups 


Process Quota Suggested Value 


WSQUOTA 16384 


(continued on next page) 
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Table 10-5 (Cont.) Sample Process Quotas for Efficient Backups 


Process Quota Suggested Value 

WSEXTENT Greater than or equal to WSQUOTA 
PGFLQUOTA 32768 

FILLM 128 

DIOLM 4096 

ASTLM 4096 

BIOLM 128 

BYTLM 65536 

ENQLM 256 

Example 


The following steps show the commands that you would use to run the Authorize 
utility and set process quotas for the SYSTEM account (if you plan to run backups 
from a different account, determine the process quotas for that account): 


1. Determine the current quota values: 


$ SET DEFAULT SYSSSYSTEM 
$ RUN AUTHORIZE 
UAF> SHOW SYSTEM 


Username: SYSTEM Owner: SYSTEM MANAGER 
Account: SYSTEM UIC: [1,4] ([SYSTEM]) 
CLI: DCL Tables: DCLTABLES 


Default: SYSSSYSROOT: [SYSMGR] 


Maxjobs: 0 Fillnm: 40 Bytlm: 32768 
Maxacct jobs: 0 Shrfillm: 0 Pbytlm: 0 
Maxdetach: 0 BIOlm: 18 JTquota: 1024 
Prelm: 10 DIOlm: 18 WSdef: 256 
Prio: 4 ASTIm: 24 WSquo: 512 
Queprio: 0 TQEl1m: 20 WSextent: 2048 
CPU: (none) Enqlm: 200 Pgflquo: 20480 
UAF> EXIT 


sSUAF-I-NOMODS, no modifications made to system authorization file 
SUAF-I-NAFNOMODS, no modifications made to network authorization file 
$UAF-I-RDBNOMODS, no modifications made to rights database 


$ 

In this example, SYSTEM has the following quotas: 
WSQUOTA 512 

WSEXTENT 2048 

PGFLQUOTA 20480 

FILLM 40 

DIOLM 18 

ASTLM 24 
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BIOLM 18 
BYTLM 32768 
ENQLM 200 


Using the System Management utility (SYSMAN), determine the value of the 
system parameters WSMAX and CHANNELCNT, as follows: 


$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> PARAMETERS SHOW WSMAX 

SSYSMAN-I-USEACTNOD, a USE ACTIVE has been defaulted on node DIEM 
Node DIEM: Parameters in use: ACTIVE 


Parameter Name Current Default Minimum Maximum Unit Dynamic 
WSMAX 2600 1024 60 100000 Pages 

SYSMAN> PARAMETERS SHOW CHANNELCNT 

Parameter Name Current Default Minimum Maximum Unit Dynamic 
CHANNELCNT 127 127 21 2047 Channels 
SYSMAN> EXIT 

$ 


In this case, the values for WSMAX and CHANNELCNT, as shown in the 
column marked Current, are 2600 and 127, respectively. 


Compare the values for SYSTEM to the values in Table 10-4, and set the 
appropriate values: 


$ SET DEFAULT SYSSSYSTEM 

$ RUN AUTHORIZE 

UAF> MODIFY SYSTEM/WSQUOTA=2600 
UAF> MODIFY SYSTEM/WSEXTENT=2600 
UAF> MODIFY SYSTEM/DIOLM=4096 
UAF> MODIFY SYSTEM/ASTLM=4096 
UAF> MODIFY SYSTEM/BIOLM=40 

UAF> MODIFY SYSTEM/BYTLM=34816 
UAF> EXIT 


Log out and then log in again so that these process quotas take effect. 


10.8 Using Disks and Tapes 


During the course of your backup operations, you will use both disk and tape 
volumes. There are four steps you normally perform before using a volume in a 
backup operation: 


1. 
2. 
3. 
4, 


Determine the device name. 
Allocate the device. 
Initialize the volume (optional). 


Mount the device (for disks only; BACKUP mounts tapes automatically). 


These tasks are described in Chapter 8. This chapter describes specifically how 
these tasks relate to BACKUP. Note that all disk operations in this chapter also 
apply to diskettes. 


10-11 


Using BACKUP 
10.8 Using Disks and Tapes 


10.8.1 Understanding Volume Initialization 


Initializing a volume does the following: 
¢ Formats it in the OpenVMS Files—11 format 
e Assigns it an ANSI label 
¢ Removes links to any existing files (effectively erasing them) 
e Writes a tape expiration date and volume protection data to the volume 
header record of the tape 
Caution 


Initializing a volume removes links to existing files on the volume, 
effectively erasing the files. Do not initialize a volume that contains data 
you want to keep. 


10.8.1.1 When to Initialize Volumes 


You must initialize a volume for use with BACKUP if any of the following 
conditions exist: 


¢ The volume is new and has not been formatted in the Files—11 format. 
e You want to remove access to data stored on the volume. 


e You want to change the volume label, expiration date, or volume protection 
data. 


e The volume contains a non-ANSI or non-ISO label. 


Table 10—6 show the three ways to initialize a volume. 


Table 10-6 Methods of Volume Initialization 


Method For More Information 
Before a backup operation with the DCL Section 8.3 

command INITIALIZE 

On the BACKUP command line with the Section 10.8.1.2 
/REWIND qualifier (for tapes only) 

On the BACKUP command line with the Section 10.8.1.3 


/AINITIALIZE qualifier (for disks only) 


10.8.1.2 Initializing Tapes 
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Instead of using the INITIALIZE command and then performing a backup 
operation, you can initialize a tape and perform a backup operation by entering 
one BACKUP command. 


How to Perform This Task 

To initialize a tape volume on the BACKUP command line, add the /REWIND 
and /LABEL qualifiers to the output specifier. The /REWIND qualifier rewinds 
and initializes the volume. The /LABEL qualifier allows you to specify the volume 
label. 
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Magnetic tape volume labels can contain a maximum of six characters. You 
can use any ANSI “a” character in a magnetic tape volume label. The ANSI 
“a” characters include numbers, uppercase letters, and any of the following 

nonalphanumeric characters: 


Se aa ia ee eae 


If you use any of the nonalphanumeric characters, you must enclose the volume 
label with quotation marks. 


Label your magnetic tapes according to the data contained on the tapes. The 
following table presents some suggestions for labeling tapes: 


Label Type of Backup Expiration Date 
DLY101 Daily, group 1, volume number 1 Expires in 7 days 
DLY102 Daily, group 1, volume number 2 Expires in 7 days 
WKY101 Weekly, group 1, volume number 1 Expires in 4 weeks 
WKY201 Weekly, group 2, volume number 1 Expires in 4 weeks — 
MTH101 Monthly, group 1, volume number 1 Expires in 12 months 
YRY101 Yearly, group 1, volume number 1 Expires in 5 years 
Note that: 


e Ifthe tape volume has already been initialized with a label that is different 
from the label you specify on the BACKUP command line, BACKUP displays 
an error message about the label mismatch. For more information, see 
Section 10.12. 


e Ifthe tape is not expired, BACKUP displays the following error message: 
$INIT-F-FILNOTEXP, file is not expired 


If you have either VOLPRO privilege or write access to the volume, or you 
are the owner of the volume, you can use the DCL command INITIALIZE 
/OVERRIDE=EXPIRATION to initialize the magnetic tape. 


You can also reenter the BACKUP command line using the 
/JIGNORE=LABEL_PROCESSING qualifier (see the OpenVMS System 
Management Utilities Reference Manual). 


¢ Ifthe volume was previously initialized with the output save-set qualifiers 
/REWIND and /PROTECTION, you must either own the volume (your UIC 
matches the owner UIC of the volume) or have VOLPRO privilege. 


Example 
$ BACKUP [ACCOUNTS.JUNE] MUAQ:JUNE.BCK/REWIND/LABEL=MTH101 


10.8.1.3 Initializing Disks 
Instead of using the INITIALIZE command and then performing a backup 


operation, you can initialize a disk and perform a backup operation by entering 
one BACKUP command. 
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How to Perform This Task 
There are two ways to initialize a disk during a backup operation: 


e When you perform an image copy to disk, BACKUP automatically initializes 
the output disk, effectively erasing any existing files and volume-initialization 
data on the disk. To preserve volume-initialization data on the output disk, 
use the /NOINITIALIZE qualifier. 


¢ When you create a sequential disk save set, BACKUP does not initialize the 
output volume (by default). You can, however, instruct BACKUP to initialize 
the output volume using the /INITIALIZE qualifier. 


Examples 


1. The following command shows how to initialize a disk on the BACKUP 
command line: 


$ BACKUP/IMAGE DUA1: DUA2: 


This command initializes DUA2: using the volume-initialization data from 
DUA1. BACKUP then copies the contents of DUA1: to DUA2:, effectively 
erasing any existing files on DUA2. Note that the files on DUA2: are stored 
contiguously, eliminating disk fragmentation. 


2. The following command shows how to preserve volume-initialization data on 
the output disk during an image copy: 


$ BACKUP/IMAGE DUA1: DUA2:/NOINITIALIZE 


This command causes BACKUP to initialize DUA2:, preserving the 
initialization data on that volume. BACKUP then copies the contents of 
DUAI: to DUA2:, effectively erasing any existing files on DUA2. 


3. These commands cause BACKUP to initialize DJA2:, effectively erasing any 
existing files: 


$ MOUNT/FOREIGN DJA2: 
$MOUNT-I-MOUNTED, USER1 mounted on DJA2: 
$ BACKUP/IMAGE DUA1: DJA2:DAILY.SAV/INITIALIZE 


BACKUP then creates an image backup of DUAI1: in the sequential disk 
save set DUA2:[000000]DAILY.SAV. If the save set exceeds the available disk 
space, BACKUP prompts for another volume. BACKUP initializes the new 
volume and extends the save set in the master file directory ([000000]) of the 
new volume. (For more information about save sets, see Section 10.5. For 
more information about the /INITIALIZE qualifier, see the OpenVMS System 
Management Utilities Reference Manual.) 


10.8.2 Mounting a Volume 


Mounting a volume makes it available to the system. BACKUP automatically 
mounts tapes when you use them for a backup operation. Most disks on your 
system are mounted at system startup. This section describes how to explicitly 
mount volumes. 


If you are planning to write a save set to a disk, decide whether the save set will 
be written in standard Files—11 format or in sequential-disk format: 


e Ifthe save set will be written in standard Files—11 format, the target disk 
must be mounted as a Files—11 disk. 
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¢ Ifa save set will be written in sequential-disk format (for example, if the 
save set occupies more than one disk), the target disk must be mounted as 
a foreign device by specifying the command qualifier /FOREIGN to the DCL 
command MOUNT. 


How to Perform This Task 


1. Enter the SHOW DEVICE command in the following format to check whether 
the device is already mounted: 


SHOW DEVICE device_name 
2. Enter the MOUNT command in the following format: 
MOUNT [/FOREIGN] device-name [volume-label] [logical-name] 


where: 

device-name is the name of the drive that holds the volume you want to 
mount. 

volume-label is the alphanumeric identification you assigned to the 


volume with the INITIALIZE command. For disk volumes, 
labels can have a maximum of 12 characters; for magnetic 
tape volumes, labels can have a maximum of 6 characters. 
You do not need to add this parameter if you are mounting 
the volume with the /FOREIGN qualifier. 


logical-name is an optional 1- to 255-character alphanumeric 
specification that you want to associate with the volume. 


Example 

$ SHOW DEVICE MU 

Device Device Error Volume Free Trans Mnt 
Name Status Count Label Blocks Count Cnt 
DADSMUA6: Online 0 

MOMSMUA6: Online 0 

FREDSMUA6: Online 0 


$ MOUNT/FOREIGN FREDSMUA6: TEST DRIVE1 
$MOUNT-I-MOUNTED, TEST mounted on _FREDSMUA6: 


This command mounts the tape in FRED$MUA6: and assigns it the logical name 
DRIVE1. 


10.8.3 Dismounting a Volume 


BACKUP does not dismount the last volume of a backup operation (unless you 
use the /RELEASE_TAPE qualifier). When you finish using a volume, you should 
dismount it. ; 


How to Perform This Task 
Enter the DISMOUNT command in the following format: 


DISMOUNT device-name 


Example 
The following command dismounts a tape in drive MUB6: 


$ DISMOUNT MUB6: 


This command dismounts and unloads the tape in MUB6. After you dismount 
and unload the volume, you can remove it from the drive. If you want to 
dismount the tape but not unload it, enter the following command: 


$ DISMOUNT/NOUNLOAD MUB6: 


10-15 


Using BACKUP 
10.9 Understanding OPCOM and Volumes 


10.9 Understanding OPCOM and Volumes 


If you have a standalone workstation or easy access to disk and tape drives at 
your facility, you probably can mount and initialize your own volumes. At some 
sites, however, an operator performs these tasks. You may need the services of an 
operator because the drive you want to use is located remotely or because you do 
not have the necessary privileges to manipulate a volume. 


If you need to communicate with the operator at your site, consult your operator 
about your site-specific procedures. Depending on how your system is customized, 
you may need to use the Operator Communication Manager (OPCOM). OPCOM 
is a system process that allows you to request assistance from the operator. It 
also provides the operator with a mechanism to respond to your requests. 


Section 2.4 explains OPCOM. 


10.9.1 Requesting Operator Assistance 
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Note 


Please consult your operator about your site-specific procedures. Your site 
may not use OPCOM or may use it differently than the examples in this 
section demonstrate. 


Suppose you need the operator to mount a tape for you. You can use OPCOM to 
ask the operator to mount the tape. 


How to Perform This Task 
Enter either the REQUEST/REPLY or the REQUEST/TO command: 


e The /REPLY qualifier assigns your request a unique number to which the 
operator can respond. 


e If your facility is very large, there may be several operators, each of whom has 
specific tasks. If this is the case, you can use the REQUEST/TO command, 
which allows you to send a message to a specific operator (identified by a 
keyword). 


If you request operator assistance and an operator is not available, you receive 
the following message: 


¢MOUNT-I-NOOPR, no operator available to service request 


This indicates that the operator has disabled the operator’s terminal. To abort 
your request, press Ctrl/Z. 


You can also use the //NOJASSIST qualifier with either the BACKUP or the 
MOUNT command: 


e Ifa mount request fails and you specified /ASSIST, mount failure messages 
appear on the operator terminal (if OPCOM is enabled). The /ASSIST 
qualifier is the default for both the BACKUP and MOUNT commands. 


e If you specified /NOASSIST, mount failure messages appear on your terminal 
instead of on the operator terminal. 


e If you are on a workstation but forget to specify /NOASSIST, OPCOM (if 
OPCOM is running) requests that the operator load the next volume. If you 
have the OPER privilege, you can respond to the request by using another 
terminal window to enter the following commands: 
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§ REPLY/ENABLE=TAPES 
$ REPLY/TO=identification-number "message text" 


Examples 


1. If you would like the operator to mount a tape, you could enter the following 
command: 


$ REQUEST/REPLY "Please mount a tape for me" 
SOPCOM-S-OPRNOTIF, operator notified, waiting...12:21:12.46 
$OPCOM-S-OPREPLY, TAPE MOUNTED ON MUA12 

2-JUN-1993 12:26:13.12. request 2 completed by operator OPA0 
$ 


The /REPLY qualifier assigns your request a unique number (in this case, 2) 
to which the operator can respond. Note that you cannot enter any additional 
commands until the operator responds. 


2. The following example shows how to direct your request to a specific operator 
using the /TO qualifier: 


$ REQUEST/TO=TAPES "Please mount a tape on MUA6 for writing" 
SOPCOM-S-OPRNOTIF, operator notified, waiting...12:40:11.32 
%OPCOM~S-OPREPLY, TAPE MOUNTED ON MUA12 AND WRITE ENABLED 
2-JUN-1993 12:45:26.18. request 5 completed by operator OPA0 
$ 


10.10 Listing the Contents of a BACKUP Save Set 


BACKUP allows you to obtain information about save sets and the files in a save 
set. You can display this information at your terminal or send it to an output file. 


Because BACKUP writes save sets in a format that only BACKUP can interpret, 
a list operation is the only way to determine the contents of a save set without 


restoring the save set. You can perform a list operation in conjunction with any 
other BACKUP operation. 


By default, a save-set listing supplies information about files in the save set 
similar to the information supplied by the DCL command DIRECTORY/DATE 
/SIZE, including the actual number of blocks used for each file. 


You can also perform a BACKUP list operation to list the contents of a BACKUP 
journal file. BACKUP journal files, which are created during a save operation by 
using the command qualifier /JOURNAL[=file-spec], contain on-disk records of 
BACKUP save operations and the file specifications of the files saved during each 
operation. Section 10.13.4 contains more information about creating and listing 
BACKUP journal files. 


How to Perform This Task 
To list the contents of a BACKUP save set, do the following: 


1. Insert the media containing the save set into the drive. 


2. Ifthe volume is a disk, mount the disk as described in Section 10.8.2 
(BACKUP mounts tapes automatically). 


3. Enter the BACKUP/LIST command in the format specified in the OpenVMS 
System Management Utilities Reference Manual. The /REWIND qualifier 
rewinds the tape to the beginning before searching for the save set. To list all 
the save sets on a volume, include the asterisk wildcard character (*) with 
the device specification. 
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You do not need to know the names of save sets on magnetic tape to list 
their contents. Enter the device specification of the drive in which the tape 
is inserted with the BACKUP/LIST command. BACKUP reads the next 
save set it encounters on the magnetic tape and stops processing when it 
reaches the end of that save set. BACKUP does not automatically rewind to 
the beginning-of-tape marker unless you include the /REWIND qualifier in 
your command. Therefore, you can list the next save set (if one exists) by 
repeating the BACKUP/LIST command. If no more save sets exist on the 
tape, BACKUP issues the following error messages: 


SBACKUP-F-OPENIN, error opening MUA0:[000000}.; as input 
-SYSTEM-W-NOSUCHFILE, no such file 


Examples 


1. To obtain save-set information about a magnetic tape save set named 
2MAR1555.BCK in the drive MIAO:, enter the following command: 


$ BACKUP/LIST MIA0:2MAR1555.BCK/REWIND 
Listing of save set(s) - 


Save set: 2MAR1555.BCK 

Written by: POLYANNA 

UIC: [000200,000207) 

Date: 21-AUG-1993 09:36:14.68 
Command: BACKUP/LOG [USER.SAVE] MIA0Q:2MAR555.BCK/REWIND/LABEL=WKY201 
Operating system: VMS version 5.5 

BACKUP version: es, 

CPU ID register: 08000000 

Node name: _SU2I:: 

Written on: _MIAO: 

Block size: 8192 

Group size: 10 

Buffer count: 3 


18-AUG-1993 14:10 
18-AUG-1993 14:11 
18-AUG-1993 14:10 
18-AUG-1993 13:44 


[USER. SAVE ]ANOTHER. DAT; 1 
[USER.SAVE]LAST. DAT; 1 
[USER.SAVE]THAT. DAT; 1 
[USER.SAVE]THIS.DAT;2 


Total of 4 files, 10 blocks 
End of save set 


Rs} 


2. The following command rewinds the tape to the beginning and lists all save 
sets on the volume MIAO: 


$ BACKUP/LIST MIAQ:*.*/REWIND 


3. The following command combines a list operation with a save operation to 
magnetic tape: 
$ BACKUP/LIST=MYBACK.DAT [PRAMS] MTA0:2MAR1555.BCK/LABEL=DLY201 
BACKUP verifies that the volume label is DLY201 and copies the contents of 
the directory [PRAMS] to a save set named 2MAR1555.BCK. The command 


qualifier LIST causes BACKUP to write save-set information to the file 
MYBACK.DAT as the save operation proceeds. 
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10.11 Understanding Multivolume BACKUP Operations 


When you save data with BACKUP, the save set often spans more than one 
volume, creating a multivolume save set. When this occurs, BACKUP fits as 
much data as it can on the first volume, then dismounts it. Depending on 
whether you specified more than one drive in the BACKUP command line or if 
you are using a tape loader, BACKUP then does the following: 


If you specified only one drive in the BACKUP command line and you are not 
using a tape loader or operator assistance, BACKUP prompts you to remove 
the tape that is in the drive and insert another one: 


SBACKUP-I-RESUME, resuming operation on volume 2 
%BACKUP~I-READYWRITE, mount volume DAILY02 on MUAO: for writing 
Respond with YES when ready: 


Note 


If you are using OPCOM and the /ASSIST qualifier (the default), the 
following message appears on your terminal: 


$BACKUP-I-RESUME, resuming operation on volume 2 
%MOUNT-I-OPROQST, Please mount volume DAILY02 in device MUAO: 
BACKUP requests: Saveset DAILY.SAV, Volume number 02, write ENABLED 


After you insert and load the second volume (or an operator fulfills the mount 
request), BACKUP continues writing data to the second volume. 


If you specified multiple drives on the command line, BACKUP continues 
writing data to the second volume, assuming the drive is loaded, is on line, 
and has the correct volume label. BACKUP unloads the first volume and 
displays the following message: 


$BACKUP-I-RESUME, resuming operation on volume 2 


If you are using a tape loader, BACKUP continues writing data to the tape in 
the next slot, assuming the tape loader has an adequate supply of correctly 
labeled tapes. BACKUP rewinds and unloads the first tape and displays the 
following message: 


*BACKUP-I-RESUME, resuming operation on volume 2 


10.11.1 Multivolume Tape Labeling 
In a multivolume save-set operation, BACKUP does not initialize the first volume 
(unless you use the /REWIND qualifier). BACKUP does initialize subsequent 
volumes. BACKUP determines the volume labels for subsequent volumes as 
follows: 


If you did not specify a label on the command line, BACKUP uses the first six 
characters of the save-set name to create a label for the first volume (unless 
you use the /EXACT_ORDER qualifier, in which case BACKUP preserves 

the volume label on the tape). For subsequent volumes, BACKUP uses the 
first four characters from the label of the first volume plus the number of 
the volume in the sequence. For example, suppose you are saving files that 
require three tapes and the save-set name is BACKUP. If you do not specify 
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a label, the first tape is labeled BACKUP, the second BACKO2, and the third 
BACKO3. 


If you specified a single label on the command line using the /LABEL qualifier 
and it matches the label of the first volume, BACKUP labels subsequent 
volumes with the first four characters of the label from the first volume plus 
the number of the volume in the sequence. For example, suppose you are 
saving files that require three tapes and the first tape is labeled TAPE: The 
second tape gets the label TAPE02, and the third tape gets the label TAPEO3. 


If you specified multiple labels on the command line using the /LABEL 
qualifier (without the /EXACT_ORDER qualifier), BACKUP uses the labels 
you specify. If the operation requires more labels than you specified, BACKUP 
uses the first four characters of the last volume label and the volume number 
of the tape. 


You can use the /EXACT_ORDER qualifier in conjunction with the /LABEL 
qualifier to specify the order in which you want BACKUP to use the labels. 
BACKUP continues the operation as long as the label of the tape in the drive 
matches the corresponding label on the command line. If you do not specify 
enough labels on the command line to complete the operation, BACKUP 
prompts you to enter a label for the tape in the drive. 


As a safeguard against initializing or writing the wrong tape, BACKUP compares 
the label that you specify on the command line to the label of the tape in the 
drive. Section 10.12 describes how BACKUP processes tape labels and handles a 
label mismatch. 


10.12 Understanding BACKUP Tape Label Processing 


After mounting a tape, BACKUP processes information stored in the volume 
header record of the tape before writing to it. epecaeany BACKUP does the 
following: 


Checks the volume protection information to ensure that you have the right 
to access the volume in the manner you requested. 


Checks the tape expiration date to prevent you from initializing a magnetic 
tape that has not yet expired. 


Compares the volume label specified in the BACKUP command line (either 
explicitly with the /LABEL qualifier or implicitly through the save-set name) 
to the volume label of the tape to prevent you from creating a save set on 
the wrong magnetic tape. BACKUP uses the following guidelines when 
processing tape labels: 


— If you specify a label that is longer than six characters, BACKUP 
truncates the label to six characters. 


— Ifthe volume label is less than six characters long, BACKUP pads the 
volume label with the blank character to six characters. 


— The first four characters of the volume label either must match the first 
four characters of the label specified in the BACKUP command line 
exactly, or must end with one or more underscore characters. If the first 
four characters of the volume label end with one or more underscore 
characters, and the label specified in the command line matches the 
part of the volume label that appears before the underscore characters, 
BACKUP accepts the match. (For example, the volume label ABN_ 
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matches the command line label ABN but does not match the command 
line label ABNE.) 


— If the fifth and sixth characters of the volume label are numbers 
between 0 and 9, BACKUP does not compare these characters with 
corresponding characters in the label specified in the BACKUP command 
line. Otherwise, the fifth and sixth characters in the volume label must 
exactly match the corresponding characters in the label specified in the 
BACKUP command line. 


If the labels match, you have the proper protection, and the tape is expired, 
BACKUP performs the designated operation. 


If you specify more than one label with the /LABEL qualifier and you do not 
specify the /EXACT_ORDER qualifier, the BACKUP operation succeeds if any of 
the labels you specify match the tape’s volume label. For example, if the tape’s 
volume label is MA1686, the BACKUP operation will succeed if you specify the 
following list of labels with the /LABEL qualifier: 


/LABEL=(MA1684,MA1685,MA1686) 
If the volume labels do not match, BACKUP displays the following error message: 


SMOUNT-I-MOUNTED, DKAQ mounted on SODAKS$MUAO: 

SBACKUP-W-MOUNTERR, volume 1 on _SODAK$MUA0 was not mounted because 
its label does not match the one requested 

%BACKUP-W-EXLABEER, volume label processing failed because 

volume MB1684 is out of order, Volume label MA1684 was expected 
specify option (QUIT, NEW tape, OVERWRITE tape, USE loaded tape) 
BACKUP> 


Depending on the option you specify, you can quit the backup operation (QUIT), 
dismount the old tape and mount a new one (NEW), overwrite the data on the 
tape (OVERWRITE), or USE the loaded tape. 


If you specify more than one label with the /LABEL qualifier and you also specify 
the /EXACT_ORDER qualifier, BACKUP compares the label of the loaded tape 
with the first label that you specified with the /LABEL qualifier. If the labels 
match, BACKUP begins the operation. If the labels do not match, BACKUP 
prompts you with the previous message. 


Assuming the volume labels of the tapes you use match the corresponding labels 
on the command line, BACKUP continues processing until it completes the 
operation or runs out of volume labels. If you do not specify enough labels on the 
command line to complete the operation or if the tape loaded does not have an 
ANSI label, BACKUP prompts you to enter a label for the tape in the drive. 


If you use blank tapes or tapes that you intend to overwrite, use the 
/JIGNORE=LABEL_PROCESSING qualifier. This suppresses the previous 
BACKUP message, which normally occurs if BACKUP encounters a non-ANSI- 
labeled tape during a save operation. 


For more information about the /EXACT_ORDER, /IGNORE, and /LABEL 
qualifiers, see the OpenVMS System Management Utilities Reference Manual. 


10.13 Backing Up Files and Directories 


This section explains copying files, backing up files and directories, comparing 
files, and creating and listing BACKUP journal files. 
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10.13.1 Copying Files to Other Files 


You can copy files using BACKUP. The copy function of the BACKUP command 
differs from the DCL command COPY because it preserves certain file information 
such as the version number, creation dates, revision dates, and protection codes 
(although, by default, the owner UIC of the copies is the UIC of the current 
process). Also, unlike the DCL command COPY, you can use BACKUP to copy 
entire directory trees, maintaining the directory structure. 


How to Perform This Task 
To make identical disk-to-disk copies of files, use the following format: 


BACKUP input_specifier output_specifier 
Examples 


1. The following command copies the file EMPLOYEES.DAT in the current 
directory to the directory [BATES.TEST]: 


$ BACKUP EMPLOYEES.DAT USER1:[BATES.TEST ]EMPLOYEES.DAT 
2. You can also create copies of entire directory trees. For example: 
$ BACKUP USER1:[BATES...] USER2:(BATES...] 


This command re-creates the directory structure of user BATES on the disk 
named USER2: 


3. The following command copies all files in the directory tree [LYKINS...] to the 
directory tree [OWLCR...] on the same disk: 


$ BACKUP [LYKINS...]*.*;* [OWLCR...]*.*;* 


10.13.2 Backing Up Files and Directories to a Save Set 
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One of the most common BACKUP operations is to save files to a save set. 
There are several types of save sets. For more information on save sets, see 
Section 10.5. 


How to Perform This Task 
To back up files or directories, use the BACKUP command in the following format: 


BACKUP input_specifier output_specifier [/SAVE_SET] [/LABEL=label] 


The input_specifier specifies the file you want to back up, and the output_specifier 
specifies the device and save-set name. 


When you save data to disk, use the output save-set qualifier /SAVE_SET. If you 
do not specify /SAVE_SET, BACKUP copies files in standard file format rather 
than creating a BACKUP save set. When you save data to tape, you do not need 
to specify /SAVE_SET; BACKUP treats all magnetic tape files as save sets. Use 
the /LABEL qualifier to specify the label of the tape you are using. 


Examples 
1. The following commands back up the file EMPLOYEES.DAT to a save set: 


$ ALLOCATE MUAQ: TAPE] @ 

%DCL-I-ALLOC, MUAQ: allocated 

$ INITIALIZE TAPE] DLY101 @ 

$ BACKUP/LOG EMPLOYEES.DAT MUAQ:EMPL MAY91.BCK/LABEL=DLY101 © 
$MOUNT-I-MOUNTED, BACKUP mounted on —MUAQ: 

BACKUP-S-COPIED, copied DUA0:{SCHULT]EMPLOYEES. DAT; 32 

$ 
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In this example, the individual commands do the following: 
@ Allocate the tape drive MUAO: and assign it the logical name TAPE1. 
© Initialize the tape in the drive and assign it the label DLY101. 


© Save the file EMPLOYEES.DAT to a save set on the tape in MUAO. The 
/LOG qualifier causes BACKUP to display the file specification of the file 
that BACKUP copies. The /LABEL qualifier indicates the volume label 
that you assigned with the INITIALIZE command. 


To create a magnetic-tape save set named NOVI38SAVE.BCK that contains 
all files and subdirectories of a directory tree named [LYKINS...], enter the 
following command: 


$ BACKUP [LYKINS...] TAPE :NOV13SAVE.BCK/LABEL=NOV13 
You can also specify a list of files that you want to back up: 


$ BACKUP 
_From: DUA0:[MGR]EMPLOYEES.DAT,USER1: [RECORDS] DOOHAN.DAT, EVANS .DAT 
_To: MUA1:MONTHLY AUG.BCK/LABEL=TAPE1 


If you are backing up large amounts of data, you can also specify more than 
one output device: 


$ BACKUP 
_From: DUA0:[000000]*.* 
_To: MTA1:BACKUP.BCK,MTA2: 


In this example, if BACKUP uses all of the space on the tape in MTAI:, 

it continues writing the save set on the tape in MTA2: (assuming MTA2: 
contains a tape that has never been initialized or one that has been initialized 
with the label BACKO2). 


As shown in the following example, you can create a Files—11 save set that 
consists of a single file; DUA1: is already mounted: 


$ BACKUP STRATCOL1.DAT DUA1:STRATDAT1.BCK/SAVE_SET 


To create a network save set, add the node, user name, and password to the 
output specifier in the following format: 


remote_nodename"username password"::device_name:(directory] 
For example: 


$ BACKUP 
From: STRATCOL1.DAT 
To: NIMBL"ROGERS SANFRANCISCO": :WORK1: [ROGERS ]STRATDAT1.BCK/SAVE_SET 


To create a sequential-disk save set on DUAO: named NOV12SAVE.BCK 
that consists of all files in the current default directory, enter the following 
commands: 


$ MOUNT/FOREIGN DUAO: 
$ BACKUP [] DUA0:NOV12SAVE.BCK/SAVE_SET 


The following example backs up the directory tree [REPORTS...] to a save 
set: 


$ BACKUP [REPORTS...] MIA11:REPORT.BCK/REWIND/IGNORE=LABEL PROCESSING 
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The /REWIND qualifier in this command line rewinds the tape and initializes 
it. The IAGNORE=LABEL_PROCESSING qualifier causes BACKUP to ignore 
any existing label information on the tape. Because the command does not 
include the /LABEL qualifier, BACKUP uses the first six characters of the 
save-set name (REPORT) as the label. 


9. You can also back up a directory to a disk that is mounted in the Files—11 
format. For example: 


$ MOUNT DUA1: PAYROLL 

*MOUNT-I-MOUNTED, PAYROLL mounted on DUAI: 

$ MOUNT DUA21: DISK21 

*MOUNT-I-MOUNTED, DISK21 mounted on _DUA21: 

$ BACKUP 

From: DUA1: [PAYROLL] 

To: DUA21:[PAYROLL_ BACKUPS ]PAY22NOV1993.SAV/SAVE_SET 


If the contents of the [PAYROLL] directory exceed the capacity of the disk 
DUA21:, the backup operation fails. 


10. If you are backing up more data than the output volume can contain, mount 
the output volume using the /FOREIGN qualifier and create a sequential disk 
save set. For example: 


$ MOUNT DUA1: PAYROLL 

$MOUNT-I-MOUNTED, PAYROLL mounted on _DUAI: 

$ MOUNT/FOREIGN DJA21: 

$MOUNT-I-MOUNTED, WEEKLY mounted on _DJA21: 

$ BACKUP 

From: DUA1: [PAYROLL] 

To: DJA21:[PAYROLL_ BACKUPS ]PAY22NOV1993.SAV/SAVE_SET 


In this example, if the contents of the [PAYROLL] directory exceed the 
capacity of the disk DJA21:, BACKUP prompts you to remove the volume in 
the drive and insert another one. For more information about Files—11 and 
sequential disk save sets, see Section 10.5. 


10.13.3 Comparing Files 
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A BACKUP compare operation compares a save set with disk files or compares 
disk files with other disk files. Perform a compare operation to check the integrity 
of a file or volume after a copy, save, or restore operation. For example, you can 
use the compare operation to compare a save set with original files or to compare 
files or volumes copied using BACKUP with original files. 


Note 


Because BACKUP processes files by blocks, comparing files not produced 
by BACKUP is likely to cause mismatch errors in files that are apparently 
identical. 


How to Perform This Task 
There are two ways to perform a compare operation: 


¢ You can perform a compare operation in conjunction with a save, restore, 
copy, or list operation by specifying the command qualifier /VERIFY. When 
you specify /VERIFY, BACKUP first performs the save, restore, copy, or 
list operation and then compares the output with the input. When you use 
/VERIFY in a copy or list operation, BACKUP displays no message when it 
begins the compare operation. When you use /VERIF'Y in a save or restore 
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operation, BACKUP displays the following message when it begins the 
compare operation: 


%BACKUP-I-STARTVERIFY, starting verification pass 


e You can perform a compare operation independently of other BACKUP 
operations by specifying the command qualifier /COMPARE. 


Examples 


1. The following example compares a save set on tape with files on disk. 
The command directs BACKUP to compare the contents of the save set 
2MAR1555.BCK with the directory [LYKINS]. 


$ BACKUP/COMPARE MTA0:2MAR1555.BCK [LYKINS] 


2. The following example compares files on disk; note the inconsistency in block 
16 between UPLIFT.EXE;4 and UPLIFT.EXE;3: 


$ BACKUP/COMPARE UPLIFT.EXE;3 UPLIFT.EXE;4 
$BACKUP-E-VERIFYERR, verification error for block 16 of 
WRKDS : [LYKINS ]UPLIFT.EXE;4 


3. To compare two entire Files—11 volumes, use an image compare operation, as 
follows: 


$ BACKUP/IMAGE/COMPARE DBA1: DBA2: 


4. To compare a physical save set with a Files—11 volume, use a physical 
compare operation, as follows. All disks in a physical compare operation 
must be mounted as foreign volumes. 


$ MOUNT/FOREIGN DBA2: 
$ BACKUP/PHYSICAL/COMPARE MIA0:PHYSBACK.BCK DBA2: 


5. The following example combines a compare operation with a copy operation: 


$ BACKUP/VERIFY/LOG FRED.DAT [FRIENDS ]OLDFRED.DAT 
$BACKUP-S-CREATED, created DISK$: [FRIENDS ]OLDFRED.DAT; 3 
$BACKUP-S-COMPARED, compared DISK$:[FRIENDS ]OLDFRED.DAT; 3 


10.13.4 Creating and Listing BACKUP Journal Files 


If you want to keep a record of BACKUP operations, create a journal file. A 
BACKUP journal file contains records of BACKUP save operations and the file 
specifications of the files saved during each operation. 


How to Perform This Task 


To create a journal file, use the command qualifier /JOURNAL=(file-spec] in a 
BACKUP save operation. | 


To list the contents of a BACKUP journal file, enter a command in the following 
format: 


BACKUPILIST[=file-spec]/JOURNAL(=file-spec] 


You cannot specify an input or output specifier with a BACKUP/LIST/JOURNAL 
command. If you omit the file specification from the command qualifier /LIST, 
BACKUP directs the output to your terminal; if you omit the file specification 
from the command qualifier /JOURNAL, the journal file receives the default 
BACKUP journal file name (SYS$DISK:[ JBACKUP.BJL). 


For more information about creating and listing BACKUP journal files, see the 
description of the /JOURNAL qualifier in the OpenVMS System Management 
Utilities Reference Manual. . 
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Example 


This example shows how to create a BACKUP journal file and list the contents of 
the BACKUP journal file: 


$ BACKUP/JOURNAL/LOG/IMAGE DRA2: MIA0Q:30CT.FUL 
*BACKUP-S-COPIED, copied DRA2: [COLLINS ]ALPHA.DAT; 4 
*BACKUP-S-COPIED, copied DRA2: [COLLINS ]EDTINI.EDT;5 


$BACKUP-I-RESUME, resuming operation on volume 2 
SBACKUP-I-READYWRITE, mount volume 2 on MIAQ: for writing 
Press return when ready: 

tBACKUP-S-COPIED, copied DRA2:[LANE]MAIL.MAI;1 
SBACKUP-S-COPIED, copied DRA2: [LANE ]MEMO.RNO;5 


$ BACKUP/JOURNAL/LIST 

Listing of BACKUP journal 

Journal file _DB2:[SYSMGR]BACKUP.BJL;1 on 3-OCT-1993 00:40:56.36 
Save set 30CT.FUL created on 3-OCT-1993 00:40:56. 36 

Volume number 1, volume label 30CT01 


[COLLINS ]ALPHA.DAT; 4 
[COLLINS JEDTINI.EDT;5 
[COLLINS ]LOGIN.COM; 46 
[COLLINS ]LOGIN.COM; 45 
[COLLINS ]MAIL.MAI;1 
[COLLINS ]MAR.DIR;1 
[COLLINS .MAR]GETJPI.EXE;9 
[COLLINS .MAR]GETJPI.LIS;14 


[LANE ]LES .MAI;1 


Save set 30CT.FUL created on 3-OCT-1993 00:40:56.36 
Volume number 2, volume label 30CT02 


[LANE ]MAIL.MAT;1 


[ LANE ]MEMO.RNO;5 
[LANE ]MEMO.RNO;4 


[WALTERS .VI]KD.RNO;52 


End of BACKUP journal 
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A BACKUP restore operation takes a save set and restores it to its original 
condition. Often a restore operation is the result of a crisis (you have deleted an 
important file or a disk has become corrupted, for example). When you restore 
files, BACKUP places the contents of the save set in the location that you specify. 


If you want to restore an entire disk, see Section 10.16. 
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How to Perform This Task 
To restore files, use the BACKUP command in the following format: 


BACKUP save_set_specifier [/SAVE_SET] /SELECT={dir...] output_specifier:[dir...] 


Use the /SAVE_SET qualifier if the save set is on a disk or diskette. The 
/SELECT qualifier lets you specify the exact file you want to restore. 


If your save set is stored on more than one magnetic tape or sequential disk 
volume, it is possible to begin restore and compare operations with any volume 
of the save set. However, if you are restoring a save set with the command 
qualifier /IMAGE, processing must begin with the first volume. (An image restore 
operation restores all files to a volume or volume set.) If you attempt an image 
restore or compare operation and specify a tape that is not the first volume of the 
save set, you receive the following message: 


SBACKUP-W-NOTISTVOL, tape ‘name’ is not the start of a save set 


You can use the command qualifier /LOG to monitor the files as they are restored. 
If you want to restore only a small number of files from a large save set, press 
Ctrl/Y to terminate processing once the files you need have been restored. 


Examples 


1. If you mistakenly delete the file USER1:;WORK.SEPTJINVOICES.DAT but it 
has been backed up to a save set named NIGHTLY.BCK, you could restore it 
using the following command: 


$ BACKUP 
_From: MUAQ:NIGHTLY.BCK/SELECT=[WORK.SEPT ] INVOICES .DAT 
_To: USER1: [WORK.SEPT] INVOICES .DAT 


2. You can also use wildcard characters to restore more than one file. For 
example: 


$ BACKUP/LOG 

_From: MUAO:NIGHTLY .BCK/SELECT=[WORK.SEPT] INVOICES*. * 

_To: USER1:[WORK.SEPT] INVOICES*. * 

SBACKUP-S-CREATED, created USER1:[WORK.SEPT]INVOICES 01.TXT;1 
SBACKUP-S-CREATED, created USER1:(WORK.SEPT]INVOICES 02.TXT;1 
SBACKUP-S-CREATED, created USER1:(WORK.SEPT]INVOICES 03.TXT;1 
SBACKUP-S-CREATED, created USER1:[WORK.SEPT]INVOICES 04.TXT;1 
SBACKUP-S-CREATED, created USER1:(WORK.SEPT]INVOICES 05.TXT;1 
SBACKUP-S-CREATED, created USER1:[WORK.SEPT]INVOICES 06.TXT;1 


The /LOG qualifier displays the file specification of the files that you restored. 


3. The following example restores files from the magnetic tape save set 
NOV12SAVE.BCK to subdirectories of the directory [LYKINS]: 


$ BACKUP TAPE:NOV12SAVE.BCK [LYKINS...] 


4. To restore a specific file from a save set, use the input save-set qualifier 
/SELECT. In the following example, the file STRAT1.DAT in the directory 
[LYKINS.GLENDO] was deleted accidentally. The user, who previously 
saved the file to a save set named NOV2SAVE.BCK, uses BACKUP to 
restore the file to the directory. Next, the user enters the DIRECTORY 
command to confirm that the file has been restored to the subdirectory 
[LYKINS.GLENDO]. 
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$ BACKUP 
From: MIAQ:NOV2SAVE.BCK/SELECT=[LYKINS.GLENDO]STRAT1.DAT;5 
“To: STRAT1.DAT;5 
$ DIRECTORY STRAT1.DAT 
Directory [LYKINS.GLENDO] 


STRAT1.DAT;5 


Total of 1 file. 
$ 


5. Suppose you deleted the entire [REPORTS] directory, which previously 
contained the following subdirectories: 


$ SET DEFAULT [REPORTS] 
$ DIRECTORY *.DIR 


Directory USER3: [REPORTS ] 


INTERNAL.DIR 
PUBLIC.DIR 
SUMMARIES .DIR 
TEST.DIR 
WEEKLY.DIR 


Total of 5 files, 13 blocks. 
$ 


If you made a backup save set of the directory and subdirectories, you could 
restore them. For example: 


NO Ww FR UT D> 


$ BACKUP MUA0:MAY-10.BCK/SELECT=[REPORTS...] USER3:{REPORTS...] 


This command restores all the files in the [REPORTS] directory and the 
subdirectories ([. INTERNAL], [.PUBLIC], [SUMMARIES], [.TEST], and 
[.WEEKLY]). 


6. To restore all files from a magnetic-tape save set named NOV12SAVE.BCK to 
the directory tree from which they were saved, enter the following command: 


$ BACKUP TAPE:NOV12SAVE.BCK/REWIND [*...] 


The /REWIND qualifier directs BACKUP to rewind the tape to the beginning- 
of-tape before beginning the restore operation. This ensures that the save set 
will be restored even if it is located before the current tape position. 


10.15 Backing Up User Disks 


This section explains performing incremental and image backups to disk and 
tape. 


10.15.1 Preparing to Back Up User Disks 
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Digital recommends that you back up your disks with no interactive users logged 
in and with no applications running. This is because if BACKUP encounters an 
open file during a save operation, it issues an error message and does not copy 
the file. Also, because of the way BACKUP scans directories, any activity in a 
directory (such as creating or deleting files) can cause files to be excluded from 
the backup. 


You can instruct BACKUP to save open files by using the /IGNORE=INTERLOCK 
qualifier on the BACKUP command, as described in Section 10.18.3. However, 
open files saved by BACKUP might contain inconsistent data, depending on the 
applications that are writing to the open files. 


Using BACKUP 
10.15 Backing Up User Disks 


How to Perform This Task 
If there are several users on your system, you should notify them that a disk 


backup is about to take place. If you have the OPER privilege, you can notify 
users with the REPLY/ALL command, as follows: 


$ REPLY/ALL "System Backup About to Begin -- Open Files Will Not Be Backed Up" 


When you enter this command, each interactive terminal on the system displays 
the following message: 


Reply received on MYNODE from user SYSTEM at VTA28: 23:35:11 
System Backup About to Begin -- Open Files Will Not Be Backed Up 


10.15.2 Performing Image Backups to Tape 


As described in Section 10.2, an image backup of a disk provides you with an 
exact logical copy of all the files on the disk. You should perform image backups 
with no interactive users on the system because of open file considerations 
(described in Section 10.15.1). Also, system performance can be affected during 
the backup process, so it is best to schedule the backup during the least busy 
times for your system. You can optimize the speed of the backup procedure 

by ensuring that certain process and system parameters are set properly (as 
described in Section 10.7). 


How to Perform This Task 
To perform an image backup, use the BACKUP command in the following format: 


BACKUP/IMAGE [/RECORD] input_device output_specifier [/LABEL=label] [/REWIND] 


The /IMAGE qualifier identifies the backup operation as an image backup. The 
/RECORD qualifier is optional and records the current date and time in the file 
header record of each file that is backed up. You must use the /RECORD qualifier 
if you are planning to perform future incremental backups. Specify the name of 
the disk you are backing up as the input_device; do not specify individual files. 
The /REWIND qualifier is optional depending on whether you want to initialize 
the tape. The /LABEL qualifier identifies the label of the tape. 


Examples 


1. The following example shows how to create an image backup of a disk on 
your workstation. If the disk is named DKA100:, and the tape cartridge drive 
is named MKB100:, you could perform the image backup by entering the 
following commands: 


$ INITIALIZE MKB100: WKLY @ 

$ MOUNT DKA100: DISK$S1 @ 

$MOUNT-I-MOUNTED, DISK$1 mounted on _DKA100: 
$ BACKUP/IMAGE/RECORD/VERIFY 

_From: DKA100: 


_To: MKB100:FULLO2.SAV/LABEL=WKLY 13) 
%BACKUP-I-STARTVERIFY, starting verification pass 


In this example, the individual commands do the following: 
@ Initialize the tape in MKB100: with the label WKLY. 
@® Mount the disk DKA100: (BACKUP will mount the tape drive). 


© Back up the disk DKA100: to the save set FULLO2.SAV on MKB100. The 
/JAIMAGE qualifier indicates that this is an image backup. The /RECORD 
qualifier records the current date and time of the backup in the file 
header record of each file that is backed up. The /VERIFY qualifier 
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causes BACKUP to check the contents of the output specifier against the 
input specifier after the files are written to the volume. The /LABEL 
qualifier indicates the label of the tape. 


2. If you are backing up a large disk, you may want to use several tape drives 
for the backup. For example: 


$ ALLOCATE MUAO0: ,MUA1: ,MUA2: 1] 
$DCL-I-ALLOC, MUAO: allocated 

$DCL-I-ALLOC, MUA1: allocated 

tDCL-I-ALLOC, MUA2: allocated 

$ BACKUP/IMAGE/RECORD/NOASSIST/ RELEASE TAPE 
_From: DKA100: 

To: MUAQ:FULL02.SAV,MUA1,MUA2/LABEL=MNTH 2) 
$MOUNT-I-MOUNTED, MNTH mounted on _MUAO: 
$BACKUP-I-RESUME, resuming operation on volume 2 
$MOUNT-I-MOUNTED, MNTHO2 mounted on _MUAIL: 
tBACKUP-I-RESUME, resuming operation on volume 3 
SMOUNT-I-MOUNTED, MNTHO3 mounted on _MUA2: 
$ 


In this example, the individual commands do the following: 
@ Allocate the tape drives that will be used in the backup. 


© Back up DKA100: to a save set. The /IMAGE qualifier indicates this 
operation is an image backup. BACKUP begins writing data to a save 
set on the tape in MUAO. If the tape in MUAO: becomes full, BACKUP 
initializes the tape in MUAI: and continues writing the save set. The 
tape in MUAI: gets the label MNTH02. If necessary, BACKUP also uses 
the tape in MUA2. 


The /RELEASE_TAPE qualifier dismounts and unloads an output tape 
device after BACKUP writes the save set. The /RECORD qualifier records 
the current date and time in the file header record of each file that is 
backed up. 


10.15.3 Performing Image Backups to Disk 
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As described in Section 10.2, an image backup of a disk provides you with an 
exact logical copy of all the files on the disk. You should perform image backups 
with no interactive users on the system because of open file considerations 
(described in Section 10.15.1). Also, system performance can be affected during 
the backup process, so it is best to schedule the backup during the least busy 
times for your system. You can optimize the speed of the backup procedure 

by ensuring that certain process and system parameters are set properly (as 
described in Section 10.7). 


How to Perform This Task 


To perform an image backup to a disk, use the BACKUP command in the 
following format: . 


BACKUP/IMAGE/RECORD input_device output_specifier/SAVE_SET 


The /[MAGE qualifier identifies the backup operation as an image backup. The 
/RECORD qualifier records the current date and time in the file header record of 
each file that is backed up. This information is essential for future incremental 
backups. The /SAVE_SET qualifier indicates that you are creating a save set ona 
disk. 
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Examples 


ie 


2. 


For example, if you want to create an image backup save set of the disk 
named DUAI: on a disk named DUA2:, you could enter the following 
commands: 


$ MOUNT DUA1: USER1 

tMOUNT-I-MOUNTED, USER1 mounted on DUAI: 
$ MOUNT DUA2: USER2 

tMOUNT-I-MOUNTED, USER2 mounted on DUA2: 
$ BACKUP/IMAGE/RECORD 

_From: DUAL: 

_To: DUA2:[USER.BACKUPS]USER1.SAV/SAVE_SET 


You can also specify multiple disk drives as the output specifier in the 
BACKUP command line. For example: 


$ BACKUP/IMAGE/RECORD 
_From: DUA: 
_To: DUB24:[USER. BACKUPS ]USER1.SAV,DUB25/SAVE_SET 


10.15.4 Performing Incremental Backups to Tape 


As described in Section 10.2, an incremental backup of a disk provides you with 
an exact copy of only those files that have been created or modified since the last 
image or incremental backup in which the /RECORD qualifier was used. 


How to Perform This Task 
To perform an incremental backup to tape, do the following: 


i. 
2: 


Perform an image backup using the /RECORD qualifier (see Section 10.15.2). 


To determine the date of the last backup that used the /RECORD qualifier, 
enter the DIRECTORY/FULL command and the file name. For example: 


$ DIRECTORY/FULL LOGIN.COM 
Directory WORK204: [HIGGINS] 


LOGIN.COM;31 


File ID: (23788,1,0) 


Size: 7/9 Owner: [ACC, HIGGINS ] 
Created: 30-JUL-1993 14:37:33.98 

Revised: 30-JUL-1993 14:37:34.44 (1) 

Expires: <None specified> 

Backup:  30-JUL-1993 20:20:57.37 


File organization: 
File attributes: 
Record format: 
Record attributes: 
RMS attributes: 


Sequential 

Allocation: 9, Extend: 0, Global buffer count: 0, No version limit 
Variable length, maximum 94 bytes 

Carriage return carriage control 

None 


Journaling enabled: None 


File protection: 
Access Cntrl List: 


System:RWED, Owner:RWED, Group:RE, World: 
None 


Total of 1 file, 7/9 blocks. 


$ + 


The date of the last (RECORD backup is indicated in the Backup field of the 
display. In this example, a /RECORD backup was performed on 30-JUL-1993 
20:20:57.37. 


10-31 


Using BACKUP 
10.15 Backing Up User Disks 


Note 


If you used the /IGNORE=INTERLOCK qualifier to back up open files 
during your last image backup or incremental backup in which the 
/RECORD qualifier was used, see Section 10.18.3. If the files remain open, 
they will not be included in the incremental backup because their backup 


date fields are not as recent as the last image backup or incremental 
backup in which the /RECORD qualifier was used. 


3. Enter the BACKUP command in the following format: 
BACKUP/RECORD/SINCE=BACKUP input_specifier output_specifier|/LABEL=label] [/REWIND] 


The /RECORD qualifier records the current date and time in the file header 
record of each file that is backed up. This information is essential for future 
incremental backups. The /SINCE=BACKUP qualifier backs up files dated 
later than the last (RECORD backup. The /REWIND qualifier is optional 
depending on whether you want to initialize the tape. The /LABEL qualifier 
identifies the label of the tape. 


Examples 


The following command is an example of an incremental backup in which 
BACKUPF saves all files on DRAI: that were modified since the previous BACKUP 
/RECORD command and stores them in a save set named 20JUNE1993.SAV: 


$ BACKUP/RECORD/SINCE=BACKUP/RELEASE_ TAPE 
From: DRA1:(000000...] 
To: MIAQ:20JUNE1993.SAV/LABEL=20JUNE 


The /LABEL qualifier identifies the volume label of the tape. Also, because 
BACKUP is performing an incremental rather than an image backup, it is 
necessary to explicitly use the notation DRA1:[000000 ... ] to specify all the 


files on DRA1. The /SINCE=BACKUP qualifier saves all files created or modified 


since the last (RECORD backup. The /RELEASE_TAPE qualifier dismounts and 
unloads an output tape device after BACKUP writes the save set and before it 
performs the action of the /RECORD command. 


10.15.5 Performing Incremental Backups to Disk 
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As described in Section 10.2, an incremental backup of a disk provides you with 
an exact copy of only those files that have been created or modified since the last 
image or incremental backup in which the /RECORD qualifier was used. 

How to Perform This Task 

To perform an incremental backup to disk, do the following: 


1. To perform an incremental backup, you must first perform an image backup 
using the /RECORD qualifier (see Section 10.15.2). 


2. To determine the date of the last backup that used the /RECORD qualifier, 
enter the DIRECTORY/FULL command and the file name. For example: 
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§ DIRECTORY/FULL LOGIN.COM 
Directory WORK204: [HIGGINS] 


LOGIN.COM; 31 
Size: 


File ID: (23788,1,0) 


7/9 Owner: {ACC , HIGGINS ] 


Created: 30-JUL-1993 14:37:33.98 
Revised: 30-JUL-1993 14:37:34.44 (1) 
Expires: <None specified> 

Backup: 30-JUL~1993 20:20:57.37 


File organization: 


File attributes: 


Record format: 


Record attributes: 


RMS attributes: 


Sequential 

Allocation: 9, Extend: 0, Global buffer count: 0, No version limit 
Variable length, maximum 94 bytes 

Carriage return carriage control 

None 


Journaling enabled: None 
File protection: 


Access Cntrl List: 


System:RWED, Owner:RWED, Group:RE, World: 
None 


Total of 1 file, 7/9 blocks. 


$ 


The date of the last (RECORD backup is indicated in the Backup field of the 
display. In this example, a /RECORD backup was performed on 30-JUL-1993 
20:20:57.37. 


Note 


If you used the /IGNORE=INTERLOCK qualifier to back up open files 
during your last image backup or incremental backup in which the 
/RECORD qualifier was used, see Section 10.18.3. If the files remain open, 
they will not be included in the incremental backup because their backup 
date fields are not as recent as the last image backup or incremental 
backup in which the /RECORD qualifier was used. 


Enter the BACKUP command in the following format: 
BACKUP/RECORD/SINCE=BACKUP input_specifier output_specifier/SAVE_SET 


The /RECORD qualifier records the current date and time in the file header 
record of each file that is backed up. The first step in an incremental backup 
is an image backup (see Section 10.15.2). If you plan to perform incremental 
backups, you must use the /RECORD qualifier when you perform image 
backups. The /SINCE=BACKUP qualifier backs up files dated later than 
the last /RECORD backup. The /SAVE_SET qualifier indicates that you are 
creating a save set on a disk. 


Examples 


1. 


If you want to create an incremental backup of a disk named DUA55: on 
a sequential disk save set on a disk named DJC12:, you could enter the 
following commands: 


$ MOUNT DUA55: DISK1 

$MOUNT-I-MOUNTED, DISK1 mounted on _DUA55: 
$ MOUNT/FOREIGN DJC12: 

SMOUNT-I-MOUNTED, DISK2 mounted on DJC12: 
$ BACKUP/RECORD/SINCE=BACKUP 

_From: DUA55:[000000...] 

_To: DJC12:USER1.SAV/SAVE_SET 
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2. You can also specify multiple disk drives as the output device in the BACKUP 
command line. For example: 


$ MOUNT DUAQ: USER1 

$MOUNT-I-MOUNTED, USER1 mounted on DUAO: 
$ MOUNT/FOREIGN DUB24: 

%MOUNT-I-MOUNTED, DISK2 mounted on DUB24: 
$ MOUNT/FOREIGN DUB25: ~ 
$MOUNT-I-MOUNTED, DISK3 mounted on _DUB25: 
§$ BACKUP/RECORD/SINCE=BACKUP 

_From: DUA0:(000000...] 

_To: DUB24:USER1.SAV,DUB25/SAVE_SET 


10.15.6 Backing Up Your Workstation Disk 


On a standalone workstation, you are probably responsible for backing up files 
on your user disks. Section 10.15.6.1, Section 10.15.6.2, and Section 10.15.6.3 
contain command procedures for making image, incremental, and interactive 
backups of user disks on your workstation. 


Digital also provides two template command procedures in the SYS$EXAMPLES 
directory for you to use in designing BACKUP command procedures. These 
command procedures are called BACKUSER.COM and RESTUSER.COM. 


If you are not familiar with using command procedures, see the OpenVMS User’s 
Manual. 


10.15.6.1 Using a Command Procedure for Nightly Image Backups 
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The following command procedure performs nightly image backups, backing up 
all the files on disk DUA2: to a tape in MUAO. The files are copied to a magnetic 
tape save set named FULL_BACKUP.SAV. This procedure is particularly useful 
for backing up files on a MicroVAX system or workstation. 


How to Perform This Task 
To use the command procedure, do the following: 


1. Ensure that you have a batch queue available on your system. (See 
Section 13.7 for information about setting up a batch queues.) You submit 
the command procedure only once, and it will execute daily at 2:00 AM. The 
command procedure automatically resubmits itself at 2:00 each morning; 
however, you must physically load a tape each day or the backup procedure 
will fail. Even if the backup procedure fails, however, the command procedure 
will continue to resubmit itself. 


2. From the SYS$MANAGER directory, create the command procedure as shown 
and call it SYSTEM_BACKUP.COM. 
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$! 
$! Resubmit this procedure -- 
$ SUBMIT/AFTER="TOMORROW+2:0" SYSSMANAGER: SYSTEM BACKUP 
$! 
$ ON ERROR THEN GOTO FAILURE 
$ SET PROCESS/PRIVILEGES=ALL 
$! 
$ REPLY/ALL - 
"Full Backup About to Begin. Open Files Will Not Be Saved" 
$! : 
$ BACKUP /IMAGE DUA2: MUAQ:FULL_BACKUP.SAV /REWIND /IGNORE=LABEL PROCESSING 
$ DISMOUNT MUAO: 
$ EXIT 
$! 
SFAILURE: 
$ WRITE SYSSOUTPUT "---> Backup failed" 
$ WRITE SYSSOUTPUT "" 
$ DISMOUNT MUAO: 
$ EXIT 


3. Edit the command procedure to reflect: 


¢ The name of the disk that you want to back up. If you want to back up 
more than one disk, list each of the devices in the BACKUP command 
line. For example, you could substitute the following lines for the 
BACKUP command line in the preceding example: 


BACKUP/IMAGE WORK DISK MIAQ:WORK BACK.SAV/REWIND 


$ 
$ i im 
$ BACKUP/IMAGE PAYROLL DISK MIAQ:PAYROLL BACK.SAV 
$! 


If you plan to perform any incremental backups later, include the 
/RECORD qualifier in the BACKUP command line. 


e The name of the tape drive that you will use. 
e The name that you want to assign to the save set. 
4. Write down the name of the save set that you assigned. 


Submit the command procedure using the following command line (if you 
gave your procedure a file name other than SYS$MANAGER:SYSTEM_ 
BACKUP.COM, substitute the appropriate file name): 


SUBMIT/NOPRINT/AFTER="TOMORROW+2:0°/QUEUE=queue_name SYS$MANAGER:SYSTEM_BACKUP) 


6. Be sure to change the tape daily and make sure that a tape is physically 
loaded on the device that you specified. When the backup is complete, keep 
the backup tape in a safe place and do not use the tape again until after you 
make another image backup of your disks. 


To stop the procedure after you have submitted it, use the DELETE/ENTRY 
command. To find the entry number, use the SHOW ENTRY command. For 
example: 
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$ SHOW ENTRY 
Entry Jobname Username Blocks Status 


14 SYS BACKUP TPROULX Holding until 19-APR-1993 02:00 
On generic batch queue CLUSTER_BATCH 
$ DELETE/entry=583 


10.15.6.2 Using a Command Procedure for Nightly Incremental Backups 


You can use a similar command procedure to perform nightly incremental backups 
of your disks. It might be more convenient to perform nightly incremental 
backups and weekly image backups if either of the following conditions applies: 


e Interactive users are on your system at all times, and system performance is 
noticeably affected by backups. 


¢ A full backup does not fit on a single magnetic tape, but an incremental 
backup does. In this case, an image backup requires the presence of an 


operator (to change the tape), whereas an incremental backup can be run as a 
batch job. 


Suppose that you want to do nightly incremental backups at 11:00 PM., except 
on Friday night, when you want to do an image backup. The following command 
procedure executes an incremental backup on three disks and automatically 
resubmits itself to run again the following night, except for Friday night. 


How to Perform This Task 
To use the procedure, follow these steps: 


1. From the SYS$MANAGER directory, create the command procedure as shown 
and call it INCREMENTAL_BACKUP.COM. 


$! 

$! Resubmit this procedure -- 

$ SUBMIT/AFTER="TOMORROW+23:0" SYSSMANAGER: INCREMENTAL BACKUP 
$! 
$ TODAY = f£$cvtime("today",,"weekday") 

$ IF TODAY .EQS. "Friday" THEN GOTO DONE 


ON ERROR THEN GOTO FAILURE 
SET PROC/PRIV=(OPER, BYPASS) 


REPLY/ALL - 
"Incremental Backup About to Begin. Open Files Will Not Be Saved" 


BACKUP/RECORD/SINCE=BACKUP DRA0:[000000...] - 
MIAO: INCREMENT1.SAV /LABEL=INC1 
BACKUP/RECORD/SINCE=BACKUP DRA1:[000000...] - 
MIA1: INCREMENT2.SAV /LABEL=INC2 
BACKUP/RECORD/SINCE=BACKUP DRA2:[(000000...] - 
MIA2: INCREMENT3.SAV /LABEL=INC3 

DISMOUNT MIAO: 

DISMOUNT MIA1: 

DISMOUNT MIA2: 

EXIT 


FAILURE: 
WRITE SYSSOUTPUT "---> Backup failed" 
WRITE SYSSOUTPUT "" 
DISMOUNT MIAO: 
DISMOUNT MIA1: 
DISMOUNT MIA2: 
EXIT 
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2. Edit the procedure to reflect: 
e The names of the disks that you want to back up 
e The name of the tané drive that you will use 
e The volume label of the tape 
¢ The name that you want to assign to the save set 


e The day of the week (if any) to be omitted in the incremental backup 


In this example, the incremental backup will not be performed on Friday, 
reserving that day for an image (full) backup. 


3. Be sure that an image backup has been made and also be sure that you 
continue to make regular image backups. When you make your image 
backups, be sure to use the /RECORD qualifier (as well as the /IMAGE 
qualifier) in your BACKUP command line. 


4. Submit the command procedure using the following command line (if you gave 
your procedure a file name other than SYS$MANAGER:INCREMENTAL_ 
BACKUP.COM, substitute the appropriate file name): 


$ SUBMIT/AFTER=23 SYSSMANAGER: INCREMENTAL BACKUP 


5. Be sure that a tape is physically loaded on the device that you specified. 
When the incremental backup is complete, keep the tape in a safe place and 
do not use the tape again until you make another image backup. 


10.15.6.3 Using an Interactive Command Procedure for Backups 
You can use the following command procedure to interactively back up a disk to a 
magnetic tape. 
How to Perform This Task 
To use the procedure, do the following: 


1. Create the command procedure in your directory: 


! Command procedure DAILYBACK.COM 
! 


! Execute this command procedure interactively 
by entering the command @[directory]DAILYBACK 
at the DCL prompt. 


output save-set qualifier /REWIND. Therefore, this 


! 

! 

! 

! The BACKUP command in this procedure contains the 

! 

! command procedure always initializes the output tape. 
! 


Ht Ti TT TH TH TH TH TN TH LD 


ON ERROR THEN GOTO FAILURE 
$ INQUIRE DRIVE "Enter the drive name (without a colon)" 
$ ALLOCATE ‘DRIVE’ 
$ INQUIRE SAVESET SPEC "Enter the save-set specifier" 
$ INQUIRE LBL "Enter the tape label" 
$ INQUIRE EXP "Enter the tape expiration date” 
$ BACKUP/NOASSIST/RECORD/IGNORE=INTERLOCK/SINCE=BACKUP - 
[...] ‘DRIVE’: 'SAVESET SPEC’ /REWIND/LABEL='LBL'/TAPE EXPIRATION='EXP’ 
$ DISMOUNT ‘DRIVE’ 
$ EXIT 
$! 
S$FAILURE: 
$ WRITE SYSSOUTPUT "---> Backup failed" 
$ WRITE SYSSOUTPUT "" 
$ DISMOUNT ‘DRIVE’ 
$ EXIT 
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2. Run the procedure and enter the drive, save set, tape label, and tape 
expiration information. 


3. After the specified tape drive is allocated, BACKUP searches the tape’s 
volume header record for a volume label and compares the label you specified 
with the /LABEL qualifier. If the volume header record contains no volume 
label, BACKUP writes the label and expiration date you specified to the 
volume header record and initializes the tape. Otherwise, BACKUP compares 
the tape’s volume label with the label you specified and ensures that the tape 
is expired. 


If the tape is not expired or the label does not match, the command procedure 
exits. If the tape is expired and the label matches, BACKUP writes the 
expiration date you specified to the volume header record and initializes 

the tape. After initializing the tape, BACKUP saves all files in the current 
default directory tree that have been created or modified since the last save 
operation to a save set with the name you specified. 


10.15.7 Backing Up Volume Shadow Sets 
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Volume shadowing maintains multiple copies of the same data on two or more 
disk volumes. If you use volume shadowing on your system, you can form a 
shadow set by uniting individual disk volumes (shadow set members). Volume 
shadowing duplicates data on each member of the shadow set. 


When you create a shadow set, individual users access it as a virtual unit. For 
example, you could create a virtual unit DSA1 that consists of the disks named 
DUAI:, DUA2:, and DUA3. Users cannot access the individual shadow set 
members directly, but can perform operations on the virtual unit (DSA1:). 


Because of the way volume shadowing duplicates data on each disk in the shadow 
set, there are special considerations for backing up a shadow set. One strategy 
for backing up shadow sets involves using the OpenVMS Backup utility. 


Caution 


Do not attempt to back up a shadow set by dismounting an individual 
shadow set member or by backing up an active shadow set member. You 
must dismount the entire shadow set and re-create it less one shadow set 
member. If you do not follow this restriction, the resultant backup copy 
may contain inconsistent data. 


How to Perform This Task 


The proper procedure for using BACKUP to back up a shadow set is described in 
detail in the Volume Shadowing for OpenVMS manual, and can be summarized 
as follows. 


Note 


You cannot perform an incremental backup using this procedure because 
the backup record date is overwritten when you add the disk volume back 
into the existing shadow set. 


1. Make sure that all shadow set members are full members; none of the 
members should be in a merge or copy state. 
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2. Dismount the entire shadow set. 


a 


Re-create the shadow set less one member. The data on the excluded member 
will mirror the data on the shadow set members. 


Mount the former shadow set member for the backup. 


4 

5. Perform an image backup on the former shadow set member. 

6. Dismount the former shadow set member when the backup is complete. 
7 


Add the shadow set member that you backed up. 


10.16 Restoring User Disks 


Occasionally you may need to restore the backup copy of an entire disk. For 
example, if the disk drive fails, you could restore the backup copy to a working 
disk. By occasionally saving and restoring an image backup, you can also prevent 
disk fragmentation. 


The way in which you restore a disk depends on whether the most recent 
backup was an image (full) or incremental backup. Section 10.16.1 describes the 
process for restoring a disk when the most recent backup was an image backup. 
Section 10.16.2 describes the process for restoring a disk when one or more 
incremental backups were performed since the most recent image backup. 


10.16.1 Restoring Image Backups 


This section describes how to restore the entire contents of a disk when your most 
recent backup was an image backup (using the /IMAGE qualifier, as described in 
Section 10.15.2). 


How to Perform This Task 
To restore an image backup, use the following procedure. 


Caution 


When you use the /IMAGE qualifier in a restore operation, the disk 

to which you are restoring the files is initialized. Initializing the disk 
removes links to the existing files, effectively erasing them. If you want 
to restore individual files or directories rather than the entire disk, see 
Section 10.14. 


1. Mount the disk to which you will restore the files, using the MOUNT 
/FOREIGN command as described in Section 10.8.2. 


2. Load and mount the volume. If the backup is contained in a Files—11 save 
set, make sure you mount the volume in the Files—11 format. If the backup is 
contained in a sequential disk save set, make sure you load the volume and 
mount it using the MOUNT/FOREIGN command. If the backup copy is on a 
tape save set, load the first tape. 


\ 


3. If you do not know the name of the save set, do one of the following: 


e Ifthe save set is on a disk, make sure the disk is mounted in the Files—11 
format and use the DIRECTORY command to determine the name of the 
save set. For example: 
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$ DIRECTORY BACKUP_DISK: [BACKUPS ] 
Directory SYS$SYSDEVICE: [ BACKUPS ] 
19APRIL1993.SAV;1 

Total of 1 file. 

The save set is named 19APRIL1993.SAV. 


e Ifthe save set is on magnetic tape, load the tape and then enter the 
following command, substituting the name of your tape drive for MJA1: 


$ BACKUP/LIST/REWIND MIA1: 


Listing of save set(s) 


Save set: 19APRIL1993.SAV 
Written by: SYSTEM 
UIC: [000001,000004) 


Date: 19-APR-1993 22:03:03.63 


The save set is named 19APRIL1993.SAV. 


4. To restore the save set, enter the BACKUP command with the IMAGE 
qualifier, using the following syntax: 


BACKUP/IMAGE device:save_set_specifier [/SAVE_SET] output_device 


If your backup save set is on a disk or diskette, then you must also use the 
/SAVE_SET qualifier immediately after the save-set specifier (device:save_set_ 
specifier). 

5. If your backup save set is on more than one tape, disk, or diskette, BACKUP 


dismounts and unloads the current volume. Load the next volume when 
BACKUP prompts for it. 


6. Use the /NOUNLOAD qualifier to dismount the disk onto which you just 
restored the files. 

Example 

The following example shows how to restore an image backup, using the following 

assumptions: 


e The saved files are contained in a tape save set named FULL_BACKUP.SAV. 
This save set is the result of an image backup. 


¢ The tape containing the saved copy of the disk contents is loaded on MIA1. 
e DRA2: is the device name of the disk to which the files will be restored. 


$ MOUNT/FOREIGN DRA2: @ 

$MOUNT-I-MOUNTED, DISK1 mounted on _DRA2: 

$ BACKUP/IMAGE MIA1:FULL BACKUP.SAV/REWIND DRA2: @ 
$ DISMOUNT/NOUNLOAD DRA2: © 


In this example, the individual command lines do the following: 


@ Mount the disk DRA2. The files will be restored to this disk. The disk must 
be loaded before it can be mounted. 
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@ Initialize DRA2:, effectively erasing any previous data on the disk. Restore 
the directory structure and all the files from the save set FULL_BACKUP.SAV 
to the disk DRA2. BACKUP restores the files contiguously on DRA2:, 
eliminating any disk fragmentation on that device. 


The /IMAGE qualifier restores a logical duplicate of the original disk so that 
the entire directory structure is restored and the files are placed in the proper 
directories. 


© Dismount the disk. 


10.16.2 Restoring Incremental Backups 


Restoring files after making an image backup and one or more incremental 
backups is a two-step process. First, restore the most recent image backup. 
Then, restore each of the subsequent incremental backups, starting with the most 
recent. . 


How to Perform This Task 


To restore incremental backups, use the following procedure (note that the first 
few steps are similar to the procedure for restoring an image backup): 


1. Mount the disk to which you will restore the files, using the MOUNT 
/FOREIGN command. (See Section 10.8.2 for information about the MOUNT 
command.) 


2. Load the tape, disk, or diskette that contains the most recent image backup 
of the disk. If the backup save set spans more than one volume, load the 
first volume of the set. If the backup copy is on a disk or diskette, mount the 
volume. 


3. If you do not know the name of the save set, do one of the following: 


e If the save set is on a disk, make sure the disk is mounted and use 
the DIRECTORY command to determine the name of the save set. For 
example: 


$ DIRECTORY BACKUP_DISK: [BACKUPS ] 
Directory SYSSSYSDEVICE: [ BACKUPS ] 
19APRIL1993.SAV;1 

Total of 1 file. 

The save set is named 19APRIL1993.SAV. 


e Ifthe save set is on magnetic tape, load the tape and enter the following 
command, substituting the name of the tape drive you use for MIAO: 


$ BACKUP/LIST/REWIND MIAO: 


Listing of save set(s) 


Save set: 19APRIL1993.SAV 

Written by: SYSTEM 

UIC: [000001,000004] 

Date: 19-APR-1993 22:03:03.63 


The save set is named 19APRIL1993.SAV. 
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Enter the BACKUP command using the following syntax: 
BACKUP/IMAGE device:save_set_specifier[/SAVE_SET] output_specifier 


The /IMAGE qualifier indicates that you are restoring an image backup. 

If your backup copy is on a disk or diskette, then you must also use the 
/SAVE_SET qualifier immediately after the save-set specifier (device:save_set_ 
specifier). 


If your backup copy is on more than one tape or diskette, load each 
subsequent tape or diskette when BACKUP prompts for the next volume. 


Use the /NOUNLOAD qualifier to dismount the disk onto which you have just 
restored the files from the image backup. 


Mount the disk that you are restoring as a file-structured volume, using the 
following syntax: 


MOUNT device-name: volume-label 


The parameter device-name is the name of the drive that holds the volume 
you want to mount. The parameter volume-label is the 1- to 6-character 
alphanumeric identification you assigned to the volume with the INITIALIZE 
command. 


Dismount the media that contained the image backup and mount the tape, 
disk, or diskette that contains the most recent incremental backup of the disk. 


Restore your incremental save sets, beginning with the most recent backup. 
Use the following syntax to restore an incremental backup: 


BACKUP/INCREMENTAL save_set_specifier[/SAVE_SET] device_specifier 


Remember that you must use the /SAVE_SET qualifier after the save-set 
specifier if your backup copies are on a disk or diskette. 


Continue restoring the incremental backups, from the most recent to the 
oldest, until you have processed all of the incremental backups since the most 
recent image backup. If the incremental backups are on more than one tape, 
diskette, or disk, then you must load each one successively when prompted by 
BACKUP. 


When you have processed the oldest incremental backup, the restore 
operation is complete. 


Example 


The following example shows the process of restoring an entire disk after a series 
of incremental backups, using the following elements and assumptions: 
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The save set for the image backup is named WORK_BACKUP.SAV. This save 
set was created using the BACKUP/IMAGE/RECORD command. 


The save sets for the incremental backups are named as follows: 


WORK_16_JAN.SAV 
WORK_17_JAN.SAV 
WORK_18_JAN.SAV 


Both the image and the incremental backup save sets are on the disk named 
DUAS3:, which is already mounted. 
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The disk to which the files will be restored is named DUA2. 


$ MOUNT/FOREIGN DUA2: @ 

$MOUNT-I-MOUNTED, WORK_B mounted on _DUA2: 

$ BACKUP/IMAGE DUA3:WORK BACKUP.SAV/SAVE SET DUA2: @ 

$ DISMOUNT/NOUNLOAD DUA2: © 

$ MOUNT DUA2: WORK B @ 

$MOUNT-I-MOUNTED, WORK B mounted on _DUA2: 

$ BACKUP/INCREMENTAL DUA3:WORK_18 JAN.SAV/SAVE SET DUA2: @ 
$ BACKUP/INCREMENTAL DUA3:WORK_17 JAN.SAV/SAVE SET DUA2: @ 
$ BACKUP/INCREMENTAL DUA3:WORK 16 JAN.SAV/SAVE SET DUA2: @ 


In this example, the individual command lines do the following: 


12) 


9oo6o 0 


Mount the disk DUA2: with the /FOREIGN qualifier. The files will be 
restored to this disk. 


Restore the directory structure and all the files from the save set WORK_ 

BACKUP.SAV to the disk DUA2. This was an image backup, so it must be 
the first save set you restore when you want to restore incremental backup 
save sets. 


Logically dismount the disk DUA2. ; 

Remount the disk DUA2:, this time as a Files—11 volume. 
Restore the most recent incremental backup. 

Restore the next incremental backup. 


Restore the oldest incremental backup. 


Restoring the incremental backups in reverse chronological order is the most 
efficient way to restore files. When you have restored the last incremental 
backup, the restore operation is complete. 


10.16.3 Restoring Volume Shadow Sets 


Because of the way volume shadowing duplicates data on each disk in the shadow 
set, there are special considerations for restoring a shadow set. To restore a 
shadow set, see Volume Shadowing for OpenVMS. 


Note 


Digital does not support a restore operation from an image save set toa 
virtual unit. This is because the BACKUP output device (the shadow set) 
must be mounted using the /FOREIGN qualifier. 


10.17 Backing Up and Restoring the System Disk 


Backing up your system disk is critical for the following reasons: 


In case a problem occurs during a software upgrade, update, or installation. A 
problem during one of the operations could render the system disk inoperable. 
Before you attempt any of these procedures, back up the system disk. Ifa 
problem occurs, you can restore the backup copy of the system disk. 
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e To prevent loss of system files if they are accidentally deleted. After you 
install, upgrade, or update the operating system or any other software 
products, you should back up the system disk. If a system file is deleted, 
making the system disk inoperable, you can restore the backup copy and 
continue to use the system. 


e In case the drive that holds the system disk malfunctions. If you have a 
backup copy of the operating system and your other software, you can restore 
it to a functioning disk and continue to use the system. 


¢ To eliminate disk fragmentation, which happens when files are stored 
noncontiguously on the disk. Perform an image backup of the system disk 
to a magnetic tape or another disk. Then restore the files to the original 
system disk. Files are stored contiguously on the restored system disk. You 
can also eliminate fragmentation by performing a disk-to-disk image backup 
without using the /SAVE_SET qualifier. This creates a functionally equivalent 
copy of the entire system disk, on which files are stored contiguously. (See 
Section 10.17.7.) 


You should use standalone BACKUP rather than the Backup utility to back 

up and restore your system disk. This is because the Backup utility does not 
copy open files (for example, accounting files or operator log files). You can 

boot standalone BACKUP into the main memory of your computer (while the 
operating system is shut down) and use a subset of BACKUP command qualifiers 
to perform a complete backup of every file on the system disk. Standalone 
BACKUP is supported only for OpenVMS installations and for backing up and 
restoring your system disk. 


You should have a standalone BACKUP kit that came with your OpenVMS 
distribution kit; however, depending on the type of media you have, standalone 
BACKUP boots faster if you build it on the system disk or a user disk. The 
installation and upgrade supplement for your computer contains instructions for 
building and booting standalone BACKUP on several types of media. 


This section provides information about building standalone BACKUP on a disk 
or tape and using it to back up your system disk. 


10.17.1 Building Standalone BACKUP on a Disk 


Standalone BACKUP boots faster on disk than it does on tape. For this reason, 
you should create a standalone BACKUP kit on disk. 


You can build standalone BACKUP on either the system disk or a user disk. If 
you build standalone BACKUP on a user disk, the kit occupies more disk space 
than if you build it on the system disk. This is because certain files needed to 
boot the system already exist on the system disk. 


To build standalone BACKUP, execute SYS$UPDATE:STABACKIT.COM. The 
procedure copies the files for booting standalone BACKUP to a new directory 

on the target device that you specify, creating the directory if necessary. When 
you build a kit on the system disk, the procedure copies the files to the [SYSE] 
directory. When you build the kit on a user disk, the procedure copies the files to 
the [SYSO] directory. 
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How to Perform This Task 
Perform the following steps to build standalone BACKUP on a disk: 


1. 
2. 


Log in to the SYSTEM account. 
Enter the following command and press Return: 


$ @SYSSUPDATE:STABACKIT 
Enter the name of the device on which to build the kit: 


Enter the device name of the disk that you are building standalone BACKUP 
on. If you are building standalone BACKUP on the system disk, enter 
SYS$SYSDEVICE. For example: 


Enter the name of the device on which to build the kit: SYSSSYSDEVICE: 


The procedure places the files in the appropriate directories on the disk that 
you are using to build standalone BACKUP. It lists the files as they are 
copied. When the procedure finishes, it displays the following message: 


The kit is complete. 


10.17.2 Booting Standalone BACKUP from a Disk 
To boot standalone BACKUP from a disk, do the following: 


1. 


If the operating system is not running, go to step 2. 


If the operating system is running, log in to the SYSTEM account. Enter the 
following command and press Return: 


$ @SYSSSYSTEM: SHUTDOWN 


Answer the questions. When the procedure asks if an automatic system boot 
should be performed, press Return for NO. When the procedure is finished, it 
displays the following message: 


SYSTEM SHUTDOWN COMPLETE -- USE CONSOLE TO HALT SYSTEM 
Halt the system. 


Boot standalone BACKUP from the root where the kit is located. The 
exact commands for booting standalone BACKUP differ among the various 
computer models. See the upgrade and installation supplement for your 
computer for booting information. 


For example, to boot a MicroVAX 3100 computer, use the following format: 
>>> B/n0000000 device-name 

where: 

e nis the number of the root on the disk containing the standalone backup. 


e device-name is the device name of the disk. 


For example, if the disk has a device name of DKA400:, and the standalone 
BACKUP kit was created in the [SYSE] directory, enter the following 
command: : 


>>> B/E0000000 DKA400 
For more information about device names, see Section 7.1. 
Standalone BACKUP displays the following message: 


VAX/VMS Version Vn.n Major version id = 01 Minor version id = 00 
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5. The procedure asks you for the date and time. Enter the date and time using 
the 24-hour clock format and press Return. For example: 


PLEASE ENTER DATE AND TIME (DD-MMM-YYYY HH:MM) 19-AUG-1993 15:00 


6. The procedure displays a list of the local devices on your system. For 


example: 
Available device MKA500: device type TK50 


Available device DKA100: device type RRD40 


Check the list of devices. If the list is incomplete, make sure that all the 
drives are properly connected to the system. See your hardware manuals for 
details. 


7. When standalone BACKUP finishes booting, it displays an identification 
message followed by the dollar sign prompt ($): 


$BACKUP-I-IDENT, Standalone BACKUP Vn.n; the date is 19-APR-1993 15:00 
$ 


To make a backup copy of the system disk, see Section 10.17.5. 
To restore the system disk, see Section 10.17.6. 


10.17.3 Building Standalone BACKUP on a Tape Cartridge (VAX Only) 


yp On VAX systems with a tape cartridge distribution kit, the tape cartridge that 
came with your distribution kit contains standalone BACKUP. Use the procedure 
in this section if your copy of standalone BACKUP becomes damaged or if you 
need to make extra copies. 


How to Perform This Task 
To build standalone BACKUP on a tape cartridge, do the following: 


1. Obtain a blank, initialized tape cartridge. Write the name S/A BKUP V5.5 on 
the paper label. Insert the label into the label slot. 


2. Write-enable the tape cartridge by sliding the write-protect switch away from 
the label slot. 


Insert the tape cartridge labeled S/A BKUP V5.5 into the drive. 
Log in to the SYSTEM account. 

Enter the following command: 

$ @SYSSUPDATE: STABACKIT 


6. The procedure asks you for the name of the target device. Enter the device 
name of the tape cartridge drive you are using to build standalone BACKUP. 
For example: 


Enter the name of the device on which to build the kit: MUAO0 


7. The procedure displays the following message: 


Please place the scratch tape cartridge in drive MUAQ0: 
This volume will receive the volume label SYSTEM. 
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Enter "YES" when ready: 
When you are ready to continue, enter YES. 


The system displays verification messages informing you that files are being 
copied. 


When standalone BACKUP is built, the procedure displays a message similar 
to the following: 


Ending time 19-JUN-1993 16:44:29.90 
Starting time 19-JUN-1993 16:30:39.05 


The Kit is complete. 


$ 


Remove the tape cartridge labeled S/A BKUP V5.5 from the tape cartridge 
drive. 


Write-protect the tape cartridge by sliding the write-protect switch toward the 
label slot. Store the cartridge in a safe place. 


10.17.4 Booting Standalone BACKUP from a Tape Cartridge (VAX Only) 


If the disk containing standalone BACKUP becomes unusable (for example, if the 
drive fails), you can boot standalone BACKUP from a tape cartridge. Booting 
standalone BACKUP from a tape cartridge takes approximately 20 minutes. 

How to Perform This Task 

To boot standalone BACKUP from a tape cartridge, use the following procedure: 


1. 


If the operating system is not running, see step 2. 


If the operating system is running, log in to the SYSTEM account. Enter the 
following command and press Return: 


$ @SYSSSYSTEM: SHUTDOWN 


Answer the questions. When the procedure asks if an automatic system boot 
should be performed, press Return for NO. When the procedure is finished, it 
displays the following message: 


SYSTEM SHUTDOWN COMPLETE -- USE CONSOLE TO HALT SYSTEM 
Halt the system. 


Insert the tape cartridge that contains standalone BACKUP into the tape 
cartridge drive. 


To boot standalone BACKUP, enter the BOOT command followed by the 
device name of the tape cartridge drive that contains standalone BACKUP. 
For example: 


>>> BOOT MUA0 
Standalone BACKUP displays the following message: 
VAX/VMS Version V5.5 Major version id = 1 Minor version id = 0 


The procedure might ask you for the date and time. Enter the date and time 
using the 24-hour clock format and press Return. For example: 


PLEASE ENTER DATE AND TIME (DD-MMM-YYYY HH:MM) 19-JUN-1993 15:00 
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7. The procedure displays a list of the local devices on your system and, if you 
have them, HSC and MSCP-served devices. For example: 


Available device DUAO: device type Generic DU 
Available device MUA0: device type TK50 


8. When standalone BACKUP finishes booting, it displays an identification 
message followed by the dollar sign prompt ($): 


tBACKUP-I-IDENT, standalone BACKUP V5.5; the date is 19-JUN-1993 15:50 
$ 


9. Remove the tape cartridge containing standalone BACKUP from the tape 
cartridge drive. . 


To make a backup copy of the system disk, see Section 10.17.5. 
To restore the system disk, see Section 10.17.6. ¢ 


10.17.5 Backing Up the System Disk to Tape 


Standalone BACKUP uses a subset of Backup utility qualifiers to back up and 
restore your system disk. It is especially important that you understand the 
functions of the IMAGE and /PHYSICAL qualifiers to the BACKUP command 
before using standalone BACKUP: 


Qualifier Function 
AMAGE Lets you create a functionally equivalent copy of the entire system 


disk. When restored, files from an image backup are placed 
contiguously on the system disk, eliminating disk fragmentation. 


/PHYSICAL Copies, saves, restores, or compares the entire system disk in terms 
of logical blocks, ignoring any file structure. 


For a complete description of the Backup utility qualifiers, see the OpenVMS 
System Management Utilities Reference Manual. 


How to Perform This Task . 
To back up the system disk to tape, use the following procedure: 


1. Obtain blank tape cartridges or magnetic tapes that you can use for the 
backup operation. 


2. Write-enable the tape. To write-enable a tape cartridge, slide the write-protect 
switch away from the tape cartridge label. To write-enable a tape, insert a 
write-enable ring in the back of the tape reel. 


Insert a tape into the tape drive. 


4, Determine the device name of the system disk you are backing up. (See 
Section 7.2 for information about determining the names of your devices.) To 
display the device name of the system disk you are booted from, enter the 
DCL command SHOW LOGICAL SYS$SYSDEVICE. 


5. Boot standalone BACKUP as described in either Section 10.17.2 or 
Section 10.17.4. 


6. Enter the BACKUP command in the following format: 
BACKUP/IMAGE/VERIFY input_specifier: output_specifier:saveset.BCK/REWIND/LABEL=label 
where: 


e input_specifier is the device name of the system disk. 
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¢ output_specifier is the device name of the drive that you want to hold the 
backup copy. 


¢ saveset.BCK is the name of the save set. The name should reflect the 
contents of the tape (for example, DEC_31_1993.BCK) and cannot exceed 
17 characters in length. 


¢ label is the volume label of the tape in the drive. If the tape has been 
initialized already, use the same volume label that was assigned by the 
INITIALIZE command. 


For example: 
$ BACKUP/IMAGE/VERIFY DUA1: MUAO :DEC_31 BACKUP. BCK/REWIND/LABEL=WKY101 


Standalone BACKUP displays the following message, which indicates that it 
has transferred the files and is verifying the accuracy of the backup copy: 


%BACKUP-I-STARTVERIFY, starting verification pass 


If your system disk contains more data than a single tape cartridge or 
magnetic tape can store, the procedure displays the following messages 
and prompt: 

%BACKUP-I-RESUME, Resuming operation on volume 2 


SBACKUP-I-READYWRITE, Mount volume 2 on MUAQ: for writing 
Enter "YES" when ready. 


If you do not receive these messages, see step 9. If you do receive these 
messages, do the following: 


Remove the backup tape from the drive. 


b. Label it COMPLETE SYSTEM BACKUP and include the date and the 
number of the tape in the sequence. 

c. Write-protect the backup tape. 

d. Write-enable another scratch tape and insert it into the drive. 

e. When you are ready to continue, enter Y (for YES) and press Return. 

f. The procedure displays the following message, which indicates that it has 


transferred the files and is verifying the accuracy of the backup copy: 
tBACKUP-I-STARTVERIFY, starting verification pass 


Each time the procedure displays a mount request, follow steps a through 
e. 


When the procedure is finished, it displays the following message: 


%BACKUP-I-PROCDONE, Operation completed. Processing finished at 19-JUN-1993 
15:30. If you do not want to perform another standalone BACKUP operation, 
use the console to halt the system. 


If you do want to perform another standalone BACKUP operation, 
ensure the standalone application volume is online and ready. 
Enter "YES" to continue: 


Remove the backup tape from the drive. Label it COMPLETE SYSTEM 
BACKUP, number it (if you used more than one cartridge), and include the 
date. 


Write-protect the tape cartridge or magnetic tape. 
Halt the system. | 
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13. Reboot the system. 
14. Store the backup tapes in a safe place. 


10.17.6 Restoring the System Disk from Tape 


If a problem occurs that renders your system disk unbootable, you can restore the 
system disk from your backup copy. 


How to Perform This Task 
To restore the system disk from tape, use the following procedure. 


Note 


The BACKUP restore operation creates a system disk that includes a set 
of volume parameters provided by Digital, including a cluster size (disk 
access scheme). You can change most volume parameters later with the 
SET VOLUME command. However, to change the cluster size, you must 
back up the system disk to a disk that has been previously initialized with 
the cluster size that you want. For more information about initializing a 
disk, see Section 8.3. For more information about the BACKUP command 
qualifiers, see the OpenVMS System Management Utilities Reference 
Manual. 


1. Boot standalone BACKUP as described in Section 10.17.2 or Section 10.17.4. 


2. Determine the device name of the system disk you want to restore. (See 
Section 7.2 for information about determining the names of your devices.) 


3. Insert the first tape of the complete system disk backup into the drive. Make 
sure the tape is write-protected. 


4. Enter the BACKUP command in the following format: 
BACKUP/IMAGE/VERIFY input_specifier:saveset.BCK/REWIND output_specifier: 
where: 
°® input_specifier is the device name of the drive that holds the backup copy. 
¢ saveset.BCK is the name of the save set. 


¢ output_specifier is the device name of the system disk that you are 
restoring. 


For example: 

$ BACKUP/IMAGE/VERIFY MUA0:DEC_31_BACKUP.BCK/REWIND DUAO: 
5. The procedure displays the following message: 

%BACKUP-I-STARTVERIFY, starting verification pass 


6. If your system disk contained more data than one tape could store, you 
receive the following messages and prompt: 


%BACKUP-I-RESUME, Resuming operation on volume 2 
%BACKUP-I-READYREAD, Mount volume 2 on MUAQ: for reading 
Enter "YES" when ready. 


If you do not receive these messages, see step 7. If you do receive these 
messages, do the following: 


a. Remove the backup tape from the drive. 


10-50 


Using BACKUP 
10.17 Backing Up and Restoring the System Disk 


b. Insert the next backup tape into the drive. 
c. When you are ready to continue, enter Y (for YES) and press Return. 
d. The procedure displays the following message: 

$BACKUP-I-STARTVERIFY, starting verification pass 


Each time the procedure displays a mount request, follow steps a through 
c. 


7. When the procedure is finished, it displays the following message: 


tBACKUP-I-PROCDONE, Operation completed. Processing finished at 19-JUN-1993 
15:30. If you do not want to perform another standalone BACKUP operation, 
use the console to halt the system. 


If you do want to perform another standalone BACKUP operation, ensure the 
standalone application volume is online and ready. Enter "YES" to continue: 


8. Remove the last backup tape from the drive. 
9. Halt the system. 

10. Reboot the system. 

11. Store the backup tapes in a safe place. 


10.17.7 Backing Up the System Disk to a Disk 
To eliminate disk fragmentation, perform a disk-to-disk image backup without 
using the /SAVE_SET qualifier. This creates a functionally equivalent copy of the 
entire system disk, on which files are stored contiguously. 
. Note 


This procedure initializes the output disk, effectively erasing the files on 
the disk. 


How to Perform This Task 
To perform a disk-to-disk image backup, use the following procedure: 


1. Obtain a disk with enough storage capacity to use for the backup. Make 
sure the disk does not contain files you need, because standalone BACKUP 
initializes the output disk. 


2. Determine the device name of the system disk you are backing up. (See 
Section 7.2 for information about determining the names of your devices.) To 
display the device name of the system disk you are booted from, enter the 
DCL command SHOW LOGICAL SYS$SYSDEVICE. 


3. Boot standalone BACKUP as described in either Section 10.17.2 or 
Section 10.17.4. 


4. Enter the BACKUP command in the following format: 
BACKUP/IMAGE/VERIFY input_specifier: output_specifier: 
where: 
°¢ input_specifier is the device name of the system disk. 


¢ output_specifier is the device name of the drive that you want to hold the 
backup copy. 
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For example: 
$ BACKUP/IMAGE/VERIFY DUAO0: DUAL: 


5. Standalone BACKUP displays the following message, which indicates that it 
has transferred the files and is verifying the accuracy of the backup copy: 


¢BACKUP-I-STARTVERIFY, starting verification pass 
6. When the procedure is finished, it displays the following message: 


SBACKUP-I-PROCDONE, Operation completed. Processing finished at 19-JUN-1993 
15:30. If you do not want to perform another standalone BACKUP operation, 
use the console to halt the system. 


If you do want to perform another standalone BACKUP operation, 
ensure the standalone application volume is online and ready. 
Enter "YES" to continue: 


7. You can use the backup output disk as the system disk. Files are stored 
contiguously on the output disk, eliminating disk fragmentation. 


8. Store the original system disk. 
9. Halt the system. 
10. Reboot the system. 


10.18 Ensuring Data Integrity | 


BACKUP has several qualifiers for further ensuring the integrity of your backups. 
Digital recommends using these qualifiers if you want to achieve maximum data 
integrity. This section describes some of the ways you can increase data integrity 
with BACKUP. For more information about these qualifiers, see the OpenVMS 
System Management Utilities Reference Manual. 


10.18.1 The /CRC Qualifier 


The /CRC qualifier enables the software cyclic redundancy check (CRC). The 
default is /CRC; you must specify /NOCRC to disable checking. Disabling 
checking reduces processing time, but increases the risk of data error. 


As an output save-set qualifier, /CRC writes the CRC checking code into the 
blocks of the output save set. 


As an input save-set qualifier, /CRC checks the CRC information in the input 
save set. 


Digital recommends that you use the CRC. Although it increases processing time, 
it also improves data integrity. 


10.18.2 The /GROUP_SIZE Qualifier 
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This output save-set qualifier causes BACKUP to write redundant data to the 
output save set. This allows BACKUP to attempt to correct read errors during 
the backup restore operation. Use the /GROUP_SIZE qualifier to define the 
number of blocks in each group of redundant information. For example: 


$ BACKUP/IMAGE/RECORD 
_From: DKA100: 
_To: MKB100:BACKUP.SAV/LABEL=WKY101/GROUP_SIZE=20 


This command adds a recovery block after every 20 blocks of saved data. This 
allows BACKUP to recover a corrupted data block for every 20 blocks of saved 
data. The value of the /GROUP_SIZE qualifier defaults to 10. 
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Although using this qualifier increases the size of the save set and the processing 
time for the operation, Digital recommends using the /GROUP_SIZE qualifier to 
increase data integrity. 


10.18.3 The /IGNORE Qualifier 


Digital recommends that you back up your system when no interactive users 
are logged in. This is because if BACKUP encounters an open file during a save 
operation, it issues an error message and does not copy the file. 


You can instruct the backup procedure to save open files by using the 
/AIGNORE=INTERLOCK qualifier on the BACKUP command. When you use 
the /IGNORE=INTERLOCK qualifier, the contents of the file at the moment of 
the backup are saved. 


The /IGNORE=INTERLOCK qualifier is useful for files that are constantly open 
(and would therefore not otherwise be saved). However, you must recognize that 
you might be saving inconsistent data, depending on the applications that are 
writing to the open files (for example, open application transactions or file data 
cached in memory). Also, because of the way BACKUP scans directories, any 
activity in a directory (such as creating or deleting files) can cause files to be 
excluded from the backup. In general, it is best to back up your system when a 
minimum number of files are open. 


Also, because of the way the file system works, using the /IGNORE=INTERLOCK 
qualifier to back up open files affects subsequent incremental backups. For 
example, you can back up an open file with the BACKUP/IMAGE/RECORD 
/AIGNORE=INTERLOCK command. However, the backup date field of the file is 
not updated until you close the file. If the file remains open during subsequent 
incremental backups, it is not included in those backups because its backup date 
field is not as recent as the last image backup. 


10.18.4 The /LOG Qualifier 


Use the /LOG qualifier to the BACKUP command to display the file specification 
of the files that BACKUP processes during a backup operation. For example, if 
you are copying files in a directory, you can use the /LOG qualifier to display the 
file specification of each file copied: 


$ BACKUP/LOG 

From: WORK3:[OCONNELL]*.* 
~To: WORK1: [OCONNELL.SCRATCH]*.* 
SBACKUP-S-CREDIR, created WORK1: [OCONNELL.SCRATCH.COM] 
%BACKUP-S-CREATED, created WORK1:[OCONNELL.SCRATCH ] DECWSMAIL.DAT;2 
SBACKUP-S-CREATED, created WORK1:[OCONNELL.SCRATCH ]DECWSSM.LOG; 42 
SBACKUP-S-CREATED, created WORK1:[OCONNELL.SCRATCH ]DECWSSM.LOG; 41 


10.18.5 The /VERIFY Qualifier 


Use the /VERIFY qualifier to cause BACKUP to compare the contents of the input 
and output specifiers after a save, restore, or copy operation. When BACKUP is 
executing the verification pass, it displays the following message: 


$BACKUP-I-STARTVERIFY, starting verification pass 


If BACKUP finds differences between the input and output files, it issues an error 
message. 
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Digital recommends that you use the /VERIFY qualifier. Although it increases 
processing time, it also improves data integrity. 


10.19 Troubleshooting 


This section describes some common BACKUP errors and how to recover from 
them. 


10.19.1 BACKUP Fatal Error Options 
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If, in the course of a backup operation, the Backup utility or standalone BACKUP 
encounters fatal hardware- or media-related errors or encounters more media 
errors than considered reasonable for data reliability, BACKUP generates the 
following informational message and prompt: 


tBACKUP-I-SPECIFY, specify option (CONTINUE, RESTART, QUIT) 
BACKUP> 
Note 


If BACKUP is running interactively and you used the command qualifier 
/NOASSIST, you can enter an option in response to the BACKUP> 
prompt. If BACKUP is executing as a batch job or you specified the 
command qualifier /ASSIST, the operator must use the DCL command 
REPLY to enter an option. 


The option you choose depends on several factors. See Table 10-7. 


Table 10-7 BACKUP Error Options and Results 


Option Restrictions Result 
CONTINUE May compromise data reliability. If possible, BACKUP ignores the 
Use only if the position of the error and continues processing. 


tape has not changed since the 
original error and if the error 
does not imply that data has 
already been lost. 


RESTART Not valid if the output volume is BACKUP unloads the current tape 
the first volume in the backup from the drive and prompts for 
operation. another volume. After you load 


another tape, BACKUP restarts 
the save operation from the point 
at which the original tape was 
mounted. 


QUIT None. BACKUP terminates the operation 
and you can reenter the command. 


The following example illustrates the sequence of events that occurs when 
BACKUP encounters an excessive rate of media errors on VOL3 and you choose 
the RESTART option: 


1. BACKUP indicates that the magnetic tape has an excessive number of media 
errors and displays the following error message and prompt: 


$BACKUP-F-WRITEERRS, excessive error rate writing VOL3 
$BACKUP-I-SPECIFY, specify option (CONTINUE, RESTART, QUIT) 
BACKUP> 
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Enter RESTART. 


BACKUP dismounts VOL3 and prompts for a new tape. Remove VOL3 from 
the drive and discard this tape. 


4. Place a new tape into the drive and enter YES in response to the prompt for 
a new tape. 


5. BACKUP restarts the save operation from the beginning of VOL3; no data is 
lost. 


10.19.2 Tape Label Errors 


When you instruct BACKUP to use a tape that has a label other than the one you 
specified, BACKUP issues the following message: 


tMOUNT-I-MOUNTED, DKAQ mounted on _SODAKS$MUAO: 

SBACKUP-W-MOUNTERR, volume 1 on _SODAK$MUA0 was not mounted because 
its label does not match the one requested 

%BACKUP-W-EXLABEER, volume label processing failed because 

volume TAPE4 is out of order, Volume label TAPE] was expected 
specify option (QUIT, NEW tape, OVERWRITE tape, USE loaded tape) 
BACKUP> 


Depending on the option you specify, you can quit the backup operation (QUIT), 


dismount the old tape and mount a new one (NEW), overwrite the data on the 
tape (OVERWRITE), or USE the loaded tape. 


If you use blank tapes or tapes that you intend to overwrite, use the 
/AIGNORE=LABEL_PROCESSING qualifier. This suppresses the previous 
BACKUP message, which normally occurs if BACKUP encounters a non-ANSI- 
labeled tape during a save operation. 
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Security Considerations 


This chapter outlines the security features available with the OpenVMS operating. 
system and suggests procedures to reduce the threat of a break-in on your system 
or cluster. It also tells how to use the access control list editor (ACL editor) to 
create and modify access control list entries (ACEs) on protected objects. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task Section 
Managing passwords Section 11.2 
Adding to the system password dictionary Section 11.2.1 
Setting up break-in detection Section 11.3 
Interpreting a user identification code (UIC) Section 11.4.1 
Parsing a protection code Section 11.4.2 
_ Creating access control lists (ACLs) Section 11.5 
Using the access control list editor (ACL editor) Section 11.7 
Auditing security-relevant events | Section 11.8.1 


This chapter explains the following concepts: 


Concept Section 

What security management involves Section 11.1 
Aspects of password management Section 11.2 
Ways to protect objects Section 11.4 
Construction of access control lists (ACLs) Section 11.5 
Audit log file analysis Section 11.9 


For full descriptions of all these tasks and concepts, refer to the Security Guide. 


11.1 Understanding Security Management 


As the person responsible for the day-to-day system management, you play an 
important role in ensuring the security of your system. Therefore, you should 
familiarize yourself with the security features available with the OpenVMS 
operating system and implement the features needed to protect systems, users, 
and files from damage caused by tampering. Effective operating system security 
measures help prevent unauthorized access and theft of proprietary software, 
software plans, and computer time. These measures can also protect equipment, 
software, and files from damage caused by tampering. 
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Types of Security Problems 


Security problems on most systems are generally caused by irresponsibility, 
probing, or penetration. The tolerance that your site might have to a breach of 
security depends on the type of work that takes place at your site. 


Environmental Considerations 


A secure system environment is a key to system security. Digital strongly 
encourages you to stress environmental considerations when reviewing site 
security. 


Operating System Protections 
In the OpenVMS operating system, managing system security is concerned with 
three major areas: 


¢ Controlling access to the system; for example, interactively, through batch 
processing jobs, or over the network 


¢ Controlling access to information and resources that are kept on the system; 
for example, files, application programs, or system utilities 


e Managing the auditing system so security-relevant events are logged, the log 
file is reviewed on a regular basis, and the log is kept to a reasonable size 


The following sections describe measures to control access to your system and its 
resources. 


11.2 Managing Passwords 


11.2.1 
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A site needing average security protection always requires the use of passwords. 
Sites with more security needs frequently require generated passwords and 
system passwords. In highly secure sites, security administrators may choose to 
use secondary passwords. 


Initial Passwords 


When you open an account for a new user with the Authorize utility, you must 
give the user a user name and an initial password. When you assign temporary 
initial passwords, observe all guidelines recommended in Section 11.2.5. You 
should consider using the automatic password generator. Avoid any obvious 
pattern when assigning passwords. 


Using the Automatic Password Generator 

To use the automatic password generator while using the Authorize utility to open 
an account, add the /GENERATE_PASSWORD qualifier to either the ADD or the 
COPY command. The system responds by offering you a list of automatically 
generated password choices. Select one of these passwords, and continue setting 
up the account. 


Using the System Dictionary and the Password History List 


The OpenVMS operating system automatically compares new passwords with 
a system dictionary to ensure that a password is not a native language word. 
It also maintains a password history list of a user’s last 60 passwords. The 
operating system compares each new password with entries in the password 
history list to ensure that an old password is not reused. 


The system dictionary is located in SYS$LIBRARY. You can enable or disable the 
dictionary search by specifying the DISPWDDIC or NODISPWDDIC option with 
the /FLAGS qualifier in AUTHORIZE. The password history list is located in 
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SYS$SYSTEM. To enable or disable the history search, specify the DISPWDHIS 
or NODISPWDHIS option to the /FLAGS qualifier. 


Adding to the System Password Dictionary 

You might want to modify the system password dictionary to include words of 
significance to your site. The following procedure allows you to add words to or 
delete words from the system dictionary. The procedure also allows you to retain 
a file of the passwords that you consider unacceptable. 


1. Create a file containing passwords you would like to add to the dictionary. 
Each password should be on a separate line and in lowercase, as follows: 


$ CREATE LOCAL PASSWORD _DICTIONARY.DATA 
somefamous 

localheroes 

[CtrV/Z| 


2. Enable SYSPRV and merge your local additions: 


$ SET PROCESS/PRIVILEGE=SYSPRV 
$ CONVERT/MERGE/PAD LOCAL PASSWORD DICTIONARY.DATA - 
_$ SYSS$LIBRARY:VMS$PASSWORD DICTIONARY .DATA 

Defining Preexpired Passwords 


When you add a new user to the UAF, you might want to define that user’s 
password as having expired previously using the AUTHORIZE qualifier 
/PWDEXPIRED. This forces the user to change the initial password when first 


logging in. 

Preexpired passwords are conspicuous in the UAF record listing. The entry for 
the date of the last password change carries the following notation: 

(pre-expired) 


By default, the OpenVMS operating system forces new users to change their 
passwords the first time they log in. Encourage your site to use a training 
program for its users that includes information about changing passwords. 


11.2.2 System Passwords 
System passwords are used to control access to terminals that might be targets 
for unauthorized use, as follows: 
e All terminals using dialup lines or public data networks for access 


¢ Terminals on lines that are publicly accessible and not tightly secured, such 
as those at computer laboratories at universities 


e Terminals the security manager wants to reserve for security operations 


Implementing system passwords is a two-stage operation involving the DCL 
commands SET TERMINAL and SET PASSWORD. First, you must decide which 
terminals require system passwords. Then, for each terminal, you enter the DCL 
command SET TERMINAL/SYSPASSWORD/PERMANENT. To enable system 
passwords for all terminals, set the appropriate bit in the system parameter 
TTY$DEFCHAR2. 
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11.2.3 Primary and Secondary Passwords 


The use of dual passwords is cumbersome and mainly needed at sites with high- 
level security concerns. Dual passwords offer three advantages: when used on a 
widespread basis, they facilitate the verification of the physical identity of each 
user at login time through visual contact; when used in limited cases, they single 
out accounts that can be logged in to only when two persons are present; they 
also prevent accounts from being accessed through DECnet for OpenVMS using 
simple access control. 


Sites with medium security requirements might want to use dual passwords 

as a tool when there are unexplained break-ins after the password has been 
changed and the use of the password generator has been enforced. Select problem 
accounts, and make them a temporary target of this restriction. If the problem 
goes away when you institute personal verification through the secondary 
password, you know you have a personnel problem. Most likely, the authorized 
user is revealing the password for the account to one or more other users who 
are abusing the account. See the Security Guide for an explanation of how to add 
secondary passwords. 


11.2.4 Enforcing Minimum Password Standards 
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Security managers can use AUTHORIZE to impose minimum password 
standards for individual users. Specifically, qualifiers and login flags provided by 
AUTHORIZE control the minimum password length, how soon passwords expire, 
and whether the user is forced to change passwords at expiration. 


Password Expiration 

With the AUTHORIZE qualifier /PWDLIFETIME, you can establish the 
maximum length of time that can elapse between password changes before 
the user will be forced to change the password or lose access to the account. 


The use of a password lifetime forces the user to change the password regularly. 
The lifetime can be different for different users. Users who have access to critical 
files generally should have the shortest password lifetimes. 


Forcing Expired Password Changes 
By default, users are forced to change expired passwords when logging in. 
Users whose passwords have expired are prompted for new passwords at 


login. A password is valid for 90 days unless a site modifies the value with 
the /PWDLIFETIME qualifier. 


Minimum Password Length 

With the AUTHORIZE qualifier /PWDMINIMUM, you can direct that all 
password choices must be a minimum number of characters in length. Users ~ 
can still specify passwords up to the maximum length of 32 characters. 


Requiring the Password Generator 

The /FLAGS=GENPWD qualifier in AUTHORIZE allows you to force the use of 
the automatic password generator when a user changes a password. At some 
sites, all accounts are created with this qualifier. At other sites, the security 
manager can be more selective. 
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11.2.5 Guidelines for Protecting Passwords 
Observe the following guidelines to protect passwords: 


Make certain the password for the SYSTEM account, which is a standard 
account on all OpenVMS systems, is secure and is changed regularly. 


Disable any accounts that are not used regularly with the AUTHORIZE 
qualifier /FLAGS=DISUSER (for example, SYSTEST and FIELD). 


Do not permit an outside or an in-house service organization to dictate the 
password for an account they use to service your system. Such service groups 
tend to use the same password on all systems, and their accounts are usually 
privileged. On seldom-used accounts, set the AUTHORIZE flag DISUSER, 
and enable the account only when it is needed. You can also change the 
password immediately after pach: use and notify the service group of the new 
password. 


Set appropriate password expiration dates, especially when you know a user 
has only short-term requirements for an account. 


Delete accounts no longer in use. 


If you have an account on a system that stores passwords in plaintext 
(unencrypted), choose a different password on all of your other accounts. 


Do not leave listings where they could be read or stolen. 


Maintain adequate protection of authorization files. Note that the system 
user authorization file (SYSUAF.DAT) and network proxy authorization file 
(NETPROXY.DAT) are owned by the system account ([ISYSTEM]). There 
should be no other users in this group. Accordingly, the categories SYSTEM, 
OWNER, and GROUP are synonymous. Normally the default UIC-based file 
protection for these authorization files is adequate. 


The following actions are not strictly for password protection, but they reduce the 
potential of password detection or limit the extent of the eemaee if passwords are 
discovered or bypassed: 


Avoid giving multiple users access to the same account. 

Separate users into distinct user groups. 

Protect telephone numbers for dialup lines connected to your system. 
Make all accounts that do not require a password captive accounts. 
Extend privileges to users carefully. 


Ensure that the files containing components of the operating system are 
adequately protected. 


11.3 Using Break-In Detection Mechanisms 


This section describes how to set up break-in detection and evasion and how to 
display the break-in database. 
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Controlling the Number of Retries on Dialups 

You can control the number of login attempts the user is allowed through a dialup 
line. If the user makes a typing mistake after obtaining the connection, the user 
does not automatically lose the connection. This option is useful for authorized 
users, while still restricting the number of unauthorized attempts. 


To implement control of retries, use the following two LGI system parameters: 
LGI_RETRY_TMO and LGI_RETRY_LIM. If you do not change the values of 
these system parameters, the default values allow the users three retries with a 
20-second interval between each. 


You should keep in mind that controlling dialup retries is only a part of an overall 
security program and is not, in itself, sufficient to avoid break-ins. An obstacle 
like redialing is not going to prove an effective deterrent to a persistent intruder. 


Discouraging Break-in Attempts Further 


The OpenVMS operating system offers additional methods of discouraging break- 
in attempts. These methods also use system parameters in the LGI category. 


Parameter Description 


LGI_BRK_LIM Defines a threshold count for login failures. When the count of login 
failures exceeds the LGI_LBRK_LIM value within a reasonable time 
interval, the system assumes that a break-in is in progress. 


LGI_BRK_TERM Controls the association of terminals and user names for counting 
failures. 

LGI_BRK_TMO Controls the time period in which login failures are detected and 
recorded. 

LGI_HID_TIM . Controls the duration of the evasive action. 

LGI_BRK_ Makes the effects of break-in detection more severe. If you set this 

DISUSER parameter to 1, the OpenVMS operating system sets the DISUSER 


flag in the UAF record for the account where the break-in was 
attempted. Thus, that user name is disabled until you manually 
intervene. 


See the Security Guide for a full description of these parameters. 


Displaying the Break-In Database 

Use the DCL command SHOW INTRUSION to display the contents of the break- 
in database and the DELETE/INTRUSION_RECORD command to remove entries 
from the break-in database. 


11.4 Understanding Ways to Protect Objects 
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The OpenVMS operating system offers two primary protection mechanisms. The 
first, UIC-based protection, is based on the user identification code (UIC) and 
is applied to all protected objects. 


The second protection mechanism uses access control lists (ACLs), which 
employ a more refined level of protection than that available with UIC-based 
protection. ACLs can be used to grant or deny access to individual users or 
groups of users. 
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11.4.1 Interpreting a User Identification Code 


Your user identification code (UIC) tells what group you belong to and what your 
unique identification is within that group. 


The Authorize utility assigns each user process in the system a unique UIC in 
the user authorization file (UAF). Each object on the system is also associated 
with a UIC (typically the UIC of its creator). 


A UIC consists of two parts, group and member, specified in the following format: 
[group,member] 


A UIC can be either numeric or alphanumeric. A numeric UIC consists of a group 
number in the range 0 through 37776 (octal) and a member number in the range 
0 through 177776 (octal). Digital reserves group 1 and groups 300-377. 


11.4.2 Understanding Protection Codes 


A protection code controls the type of access allowed (or denied) to a particular 
user or group of users. It has the following format: 


[category: types of access allowed (, category: types of access allowed....)] 
e category 
User categories include system (S), owner (O), group (G), and world (W). 


Each category can be abbreviated to its first character. Categories have the 
following definition: 


System Members of this category can include any of the following: 


— Users with low group numbers, usually from 1 through 10 

- (octal). These group numbers are generally for system managers, 
security administrators, and system programmers. (The exact 
range of system group numbers is determined by the system 
manager in the setting of the system parameter MAXSYSGROUP. 
It can range as high as 37776 [octal].) 


— Users with the SYSPRV privilege. 

— Users with the GRPPRV privilege whose UIC group matches the 
UIC group of the object’s owner. 

— When determining access to files on a disk volume, users whose 
UIC matches the UIC of the volume’s owner. 


Owner The user with the same UIC as the user who currently owns the 
object. In general, the creator of an object is entitled to owner access 
unless explicit action is taken to secure the object from its creator. 


Group All users who are in the same UIC group as the object’s owner. 


World All users, including those in the first three categories. 


When specifying more than one user category, separate the categories with 
commas, and enclose the entire code in parentheses. You can specify user 
categories and access types in any order. 


A null access specification means no access, so when you omit an access 
type for a user category, that category of user is denied that type of access. 
To deny all access to a user category, specify the user category without any 
access types. Omit the colon after the user category when you are denying 
access to a category of users. Note that users can gain access through any 
category for which they qualify; for example, a system user can gain access 
through the world category as well as through the system category. 


When you omit a user category from a protection code, the current access 
allowed that category of user remains unchanged. 
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¢ access types 


For files, the access types include read (R), write (W), execute (E), or delete 
(D). The access type is assigned to each ownership category and is separated 
from its access types with a colon (:). The access types have the following 
meanings: 


—- Read—Read a file; read from a disk volume. 
— Write—Write a file; write to a disk volume. 


—- Execute—Execute an image file; look up entries in a directory if you 
explicitly specify the file name (without using wildcard characters); create 
files on a disk volume. 


—- Delete—Delete files. 


The same access types (read, write, execute, and delete) are supported for all 
protected objects. See the Security Guide for details. 

Example 

The protection code in the following example allows system users full access to an 
object, the owner full access except delete, and group and world users no access: 
SET PROTECTION=(S:RWED,O:RWE,G,W) [JONES]MY FILE.TXT 


> On VAX systems, you can use the SET SECURITY command to establish the 
same protection; for example: 


$ SET SECURITY/PROTECTION=(S:RWED,O:RWE,G,W) [JONES]MY FILE.TXT 4 


How to Change the Default Protection 


The operating system provides each process with a default UIC-based protection 
of (S:RWED,O:RWED,G:RE,W). To change the default protection, enter the SET 
PROTECTION command with the /DEFAULT qualifier as shown in the following 
example: 


$ SET PROTECTION=(S:RWED,O:RWED,G:RE,W:RE) /DEFAULT 


11.5 Creating Access Control Lists (ACLs) 


For most interactive user accounts, the default UIC-based protection is adequate. 
However, in some cases (such as project accounts) you may want to set up an 
additional level of protection by using access control lists (ACLs). ACL-based 
protection provides a more refined level of security in cases where different 
groups or members of overlapping groups share access to an account. 


11.5.1 Kinds of Entries in an ACL 


An access control list (ACL) is a list of entries, each of which defines some 
attribute of an object. Each entry is called an access control entry (ACE). 


The following types of ACEs are available: 
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<> 


ACE 
Identifier ACE 


Default 
Protection ACE 


Security Alarm 
ACE 
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Description 


Controls the types of access allowed to specific users based on the 
user’s identification. Each Identifier ACE includes one or more 
rights identifiers and a list of the types of access the user holding 
the identifier has permission to exercise. See Section 11.5.2 for a 
summary of identifiers. 


For example, the following ACE grants the user Jones read, write, and 
execute access to an object: 


( IDENTIFIER=[ACCOUNTING, JONES ] ,ACCESS=READ+WRITE+EXECUTE ) 


Allows you to specify a protection code for a directory file that 
is propagated to all files created within that directory and its 
subdirectories. 


For example, the following ACE assigns a protection code to newly 
created files in a directory. The code gives users in the system and 
owner categories full access, it gives group users both read and execute 
access, and it denies access to users in the world category. 


_ (DEFAULT PROTECTION, S:RWED,O:RWED,G:RE,W: ) 


Allows you to request that a security alarm message be sent to the 
operator’s terminal if an object is accessed in a particular way. On AXP 
systems, the ACE applies only to files and directories. 


For example, the following ACE causes an alarm message whenever a 
particular file is successfully read: 


( ALARM=SECURITY , ACCESS=SUCCESS+READ ) 


The security Alarm ACE has no effect unless ACL alarms are enabled 
with the following command: 


$ SET AUDIT/ALARM/ENABLE=(ACL) 


On VAX systems, three additional ACEs are available: 


Additional ACE 
Creator ACE 


Security Audit 
ACE 


Description 


Adds an extra ACE to the ACL of a file created within the directory to 
which you assign the Creator ACE. The Creator ACE applies when the 
file being created is not owned by the user identification code (UIC) of 
the process creating the file, such as when the directory is owned by a 
resource identifier. 


The following ACE, for example, specifies that any user creating a file 
in the directory will receive read, write, execute, and delete access to it: 
(CREATOR , ACCESS=READ+WRITE+EXECUTE+DELETE ) 

The Creator ACE applies to directory files only. 


Specifies the access criteria that cause a security alarm message be 
sent to the system security audit log file if an object is accessed in a 
particular way. 


For example, the following ACE causes an alarm message whenever a 
particular file is successfully read: 
(AUDIT=SECURITY , ACCESS=SUCCESS+READ ) 


A message is recorded only if ACL audits are enabled with the DCL 
command SET AUDIT/AUDIT/ENABLE=ACL. 
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Additional ACE _ Description 


Subsystem ACE Grants additional identifiers to a process while it is running the image 
to which the Subsystem ACE applies. Users with execute access to the 
image can access objects that are in the protected subsystem, such as 
data files and printers, but only when they run the subsystem images. 
The Subsystem ACE applies to executable images only. 


For example, the following ACE adds the identifier ACCOUNTING 
to processes that are executing a particular subsystem image. The 
identifier entitles the processes to access objects owned by the 


subsystem. 


(SUBSYSTEM, IDENTIFIER=ACCOUNTING) ¢ 


See the OpenVMS System Management Utilities Reference Manual for a complete 
description of each kind of ACE. The Security Guide provides further details on 


how to construct and apply ACEs. 


11.5.2 Types of Identifiers 


An Identifier ACE can contain different types of identifiers. Any of these 


identifiers is an alphanumeric string of 1 to 31 characters with at least one 
alphabetic character. Valid characters include numbers 0 to 9, characters A to Z, 
the dollar sign ($), and the underscore (_). The following table lists each type of 


identifier: 

Type Description 

UIC identifiers Based on a user’s identification code 
(UIC), which uniquely identifies a user 
on the system and defines the group to 
which the user belongs. 

General Defined by the security administrator. 

identifiers 

Environmental Describe different types of users based on 

identifiers their initial entry into the system. These 
identifiers are automatically created by 
the system. 


Example 


[GROUP1,JONES] 
[JONES] 

GROUP1 

JONES 


SALES 
RESERVE_DESK 


BATCH, NETWORK 
INTERACTIVE 
LOCAL, DIALUP 
REMOTE 


In addition to the environmental identifiers, a system node identifier of the 
form SYS$NODE_node_name is created by the system startup procedure 


(STARTUP.COM in SYS$SYSTEM). 


11.6 Assigning ACLs 
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You can place ACLs on the following object classes: 


Capability (VAX systems only) 
Device 

Common event flag cluster (VAX systems only) 
File 

Group global section 

Logical name table 

Queue 

Resource domain (VAX systems only) 
Security class (VAX systems only) 
System global section 

Volume (VAX systems only) 


Security Considerations 
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Typically, ACLs are used when you want to provide access to an object for some, 
but not all, users, or if you want to deny access to specific, unprivileged users. 
When the operating system receives a request for access to an object having an 
ACL, it searches each access control list entry in the ACL, stopping at the first 
match. If another match occurs in the ACL, it has no effect. Therefore, ACEs 
granting or denying access to a protected object for specific users should appear 
in the ACL before ACEs identifying broader classes of users. 


11.7 Using the ACL Editor 


Q 


The access control list editor (ACL editor) is a screen-oriented editor used to 
create and maintain ACLs. Use the ACL editor to define an ACL for a system 
object or to edit an existing ACL. 


Invoke the ACL editor using the DCL command EDIT/ACL followed by the name 
of the object whose ACL you want to create or modify. For example, the following 
command invokes the ACL editor to create an ACL for the file INVENTORY.DAT: 


$ EDIT/ACL INVENTORY.DAT 


On AXP systems, if the object whose ACL you want to create or modify is not 

a file, you must specify the type of object with the /OBJECT=type qualifier. For 
example, the following command invokes the ACL editor to create an ACL for the 
disk DOCDS$: . 


$ EDIT/ACL/OBJECT=DEVICE DOCDS ¢@ 


On VAX systems, if the object whose ACL you want to create or modify is not a 
file, you must specify the type of object with the /CLASS qualifier. For example, 
the following command invokes the ACL editor to create an ACL for the disk 
DOCDS$: 


§$ EDIT/ACL/CLASS=DEVICE DOCDS ¢ 


On AXP and VAX systems, you can invoke the ACL editor to modify an existing’ 
ACL or to create a new ACL on the object. If an object has an ACL, the ACL will 
appear on the screen when the ACL editor is invoked. 


The ACL editor can be invoked from within a program written in any OpenVMS 
common language that generates calls using the OpenVMS calling standard. 
Refer to the OpenVMS Utility Routines Manual for more information on using the 
callable interface to the ACL editor. 


11.7.1 Adding an Identifier ACE 


An Identifier ACE controls the types of access allowed to a particular user or 
group of users. It has the following format: 


(IDENTIFIER=identifier[,options][,access]) 


For example, the following ACE grants user Pat, who is identified by the UIC 
identifier [SALES,PAT], read, write, and execute access to a file. The ACL denies 
Pat delete and control access because it omits them from the access statement. 


( IDENTIFIER=[SALES , PAT] , ACCESS=READ+WRITE+EXECUTE ) 


The Default attribute of an Identifier ACE allows users to define one or more 
default ACEs for inclusion in the ACLs for newly created files in a particular 
directory. Thus, if you wanted all files in the directory [MALCOLM] to have an 
ACE that permitted read and write access to users with the PERSONNEL 
identifier, you could include the following ACE in the ACL for the file 
MALCOLM.DIR: 
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( IDENTIFIER=PERSONNEL , OPTIONS=DEFAULT, ACCESS=READ+WRITE) 


As a result of this ACE, any file created in the [MALCOLM] directory has the 
following ACE: 


( IDENTIFIER=PERSONNEL , ACCESS=READ+WRITE ) 


See the Security Guide for further discussion of the Default attribute and its 
effect on the processing of an ACL. 


11.7.2 Setting a Default Protection Code 


A Default Protection ACE defines a protection code for all files that are 
subsequently created in the directory and in any subdirectories under that 
directory, unless protection is specified for one of those files individually. The 
ACE does not apply if a previous version of the file exists (in this case, the 
previous file protection is used). This ACE type has the following format: 


(DEFAULT_PROTECTION|, options], protection-code) 


For example, the following ACE specifies that users in the system and owner 
categories have read, write, execute, and delete access to any files subsequently 
created in the directory, and that group and world users have no access: 


(DEFAULT PROTECTION, S:RWED,O:RWED,G,W) 


Note 


The Default Protection ACE does not apply to subdirectories. See 
Section 9.3.3.1.2. 


11.7.3 Generating Security Alarms and Audits 


<> 


The security Alarm ACE allows you to specify that an alarm message be sent to 
the security operator’s terminal if a certain type of access takes place. 


VAX systems also support the security Audit ACE, which directs the event 
message to the system security audit log file. ¢ 


Refer to the Security Guide for more information on how to use this type of ACE. 


11.8 Auditing Security-Relevant Events 


AXP 
<i> 


On AXP systems, security-relevant event messages are sent as both alarms and 
audits; the alarm messages are sent to the operator’s terminal and the audit 
messages are sent to the system security audit log file. ¢ 


On VAX systems, system managers can select the destination for security-relevant 
event messages. Alarm messages are sent to the operator’s terminal and audit 
messages are sent to the system security audit log file. You can choose to have an 
event reported as an alarm, as an audit, or as both. ¢ 


11.8.1 Enabling Classes of Security Alarms 
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The OpenVMS operating system automatically monitors a certain number of 


events, as listed in Table 17-5. 


Security Considerations 
11.8 Auditing Security-Relevant Events 


You can enable additional classes of events by listing one or more of the keywords 
of the /ENABLE qualifier to the DCL command SET AUDIT listed in Table 11-1. 


Table 11-1 Kinds of Security Events OpenVMS Can Report 


Event Class 


y+Access 


ACL 
Authorization 


Breakin 


*Connection 


+*Create 
+Deaccess 
*Delete 

£ File_Access 


tIdentifier 
Install 


Logfailure 
Login 
Logout 
Mount 
*NCP 


+Privilege 
+Process 
*SYSGEN 


*Time 


TVAX specific 
£AXP specific 


Description 


Specifies access events for all objects in a class. You can audit 
selected types of access, both privileged and nonprivileged, to 
all protected objects of a particular class. 


Events requested by a security Audit or Alarm ACE in the 
access control list (ACL) of an object. 


Modification of any portion of SYSUAF.DAT, NETPROXY.DAT, 
or RIGHTSLIST.DAT. 


Breakin attempts. 


Logical link connections or terminations through SYSMAN, 
DECnet for OpenVMS, DECwindows products, or an 
interprocess communication (IPC) call. 


Creation of a protected object. 
Deaccess from a protected object. 
Deletion of a protected object. 


Selected types of access (privileged and nonprivileged) to files 
and global sections. ; 


+On VAX systems, the Access events include file accesses. 
Use of identifiers as privileges. 


Modifications made to the known file list through the Install 
utility. 


Failed login attempts. 
Successful login attempts. 
Logouts. 

Volume mounts and dismounts. 


Modification to the network configuration database, using the 
network control program (NCP). 


Successful or unsuccessful use of privilege. 
Use of one or more of the process control system services. 


Modification of a system parameter with the System 
Generation utility (SYSGEN). 


Modification of system time. 


See the OpenVMS DCL Dictionary for more information about the SET AUDIT 


command. 


11.9 Analyzing Audit Log Files 


The Audit Analysis utility (ANALYZE/AUDIT) enables system managers and 
site security administrators to selectively extract and display information from 
security audit log files. Using ANALYZE/AUDIT qualifiers, you can choose from 
among a variety of report formats and select the event criteria to be included in 
the report. See the Security Guide for a description of how to use the utility. 
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Managing the Queue Manager and Queue 
Database 


This chapter describes tasks you peform to set up and manage the queue 
manager and queue database for the OpenVMS batch and print queuing system. 
You must set up the queue manager and queue database before creating and 
starting queues. 

Information Provided in This Chapter 

This chapter describes the following tasks: 


Task Section 


Specifying the location of queue database files Section 12.3 


Starting the queue manager and creating the queue database 
Customizing queue manager failover 

Stopping the queue manager 

Restarting the queue manager 

+Creating an additional queue manager 

tDisplaying information about the queue manager 

Saving the queue database 

Restoring the queue database 

Solving queue manager and queue database problems 


Reporting a queuing system problem to Digital 


TVAX specific 


This section explains the following concepts: 


Concept 


The queue manager 


The queue database 


Section 12.4 
Section 12.5 
Section 12.6 
Section 12.7 
Section 12.8 
Section 12.9 
Section 12.10 
Section 12.11 
Section 12.12 
Section 12.13 


Section 


Section 12.1 
Section 12.2 


12.1 Understanding the Queue Manager 


If you have a printer on your system, or if you want to use batch processing, you 
must use queues. The queue manager controls queuing activity. The queue 
database stores information about queues and jobs. Before you can perform 
any queue operation, you must start the queue manager and create the queue 
database. For information, see Section 12.4. 
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Figure 12—1 OpenVMS Batch and Print Queuing System 
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Figure 12-1 illustrates how the queue manager works to manage queue activity 
in a VMScluster environment. 


When a user submits a batch or print job to a queue, the queue manager does the 
following: 


1. Receives the user’s queue request, including information about the type of 
job, the file name or names, the name of the queue, and any special options. 


2. Stores and retrieves appropriate information from the queue database to 
print or execute the job. 


3. Places the job in the appropriate queue to await its turn for processing. 


12-2 


Managing the Queue Manager and Queue Database 
12.1 Understanding the Queue Manager 


Print jobs are sent to an independent process, called a symbiont, for formatting 
and are finally sent to the printer for printing. For batch jobs, the job controller 
creates a process to perform the tasks in the batch job. 


A single queue manager process controls queuing for all processes on a node or in 
a VMS cluster environment. Jobs can be submitted from one node and executed 
on a queue running on another VMScluster node. User processes, symbionts, and 
job controllers on each node communicate directly with the queue manager. 


In addition, the job controller works with the queue manager to perform the 
following queue management tasks: 


¢ Create and monitor batch, symbiont, and queue manager processes 
e Restart the queue manager process on reboot 


e Handle failover of the queue manager in a VMScluster environment 


12.1.1 Queue Manager Failover 


By default, in a VMScluster environment, the queue manager will attempt to fail 
over to another node if the node on which the queue manager is running leaves 
the VMScluster. You can specify the order in which VMScluster nodes should 
claim the queue manager process or limit the nodes that can run the queue 
manager. For more information, see Section 12.4. 


12.1.2 Multiple Queue Managers (VAX Only) 


<> 


On VAX systems, to work around CPU or memory shortages in a VAXcluster 
environment, you can use multiple queue managers to distribute the batch and 
print work load between nodes. 


For example, you might create separate queue managers for batch queues and 
print queues. You could then run the batch queue manager on one node and the 
print queue manager on a different node. 


For information on creating an additional queue manager, see Section 12.8. Use 
the command SHOW QUEUE/MANAGER to display information about queue 
managers on the system. For more information, see Section 12.9. 


Restrictions for Using Multiple Queue Managers 

Multiple queue managers have the following restrictions: 

¢ Queues running on one queue manager cannot reference queues running 
on a different queue manager. For example, a generic queue running on 


queue manager A cannot direct jobs to an execution queue running on queue 
manager B. 


e You cannot move a job from a queue on one queue manager to a queue on a 
different queue manager. 


e The operating system allows a maximum of five queue managers in a 
VAXcluster environment. 

Naming of Multiple Queue Managers 

You need to know the process names of all your queue managers to troubleshoot 

queue manager problems as explained in Section 12.12.2. 


The default queue manager name is SYS$QUEUE_MANAGER and the process 
name for the default queue manager process is QUEUE_MANAGE. 
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When you create an additional queue manager, you specify its name with the 
/NAME_OF_MANAGER qualifier. The process name for a queue manager 
other than the default is the first twelve characters of the queue manager name 
assigned with /NAME_OF_MANAGER qualifier. 


For example, if you create a queue manager with the name PRINT_MANAGER, 
the process name is PRINT_MANAGE. 


How Multiple Queue Managers Use the Queue Database 


Multiple queue managers share a single queue database. However, a queue 
database for multiple queue managers contains more files than one for a single 
queue manager. For more information, see Section 12.2. 


Commands for Managing Multiple Queue Managers 


By default, the following commands affect the default queue manager 
SYS$QUEUE_MANAGER or the queues running on the default queue manager: 


¢ START/QUEUE/MANAGER 

e ENABLE AUTOSTART/QUEUHES and DISABLE AUTOSTART/QUEUES 
¢ STOP/QUEUES/ON_NODE 

¢ STOP/QUEUVE/MANAGER 

¢ DELETE/QUEUE/MANAGER 


The /NAME_OF_MANAGER qualifier allows you to use these commands with 
a different queue manager. For more information, see the OpenVMS DCL 
Dictionary. ¢ 


12.2 Understanding the Queue Database 


The queue database stores information used to keep the queuing system 
operating, including information about jobs, queues, and the queue manager. The 
queue database for a single default queue manager (SYS$QUEUE_MANAGER) is 
made up of the following files: 


File Description 
Master file Contains: 
(QMAN$MASTER.DAT) 
¢ The location of the queue and journal files 
¢ Definitions of forms and characteristics 
¢ A list of queue names 
e A list of nodes allowed to run the queue 
manager 
e A list of queue managers 
Queue file Contains the queue definitions you form when you 
(SYS$QUEUE_MANAGER.QMAN$QUEUES) create, start, or modify queues. 
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File Description 
Journal file Contains information allowing the queue manager 
(SYSSQUEUE_MANAGER.QMAN$JOURNAL) to return to the last known state if: 


e Astandalone machine is unexpectedly stopped 


e A VMScluster node that is running the queue 
manager leaves VMScluster environment 


The journal file also contains job definitions. 


i> On VAX systems with multiple queue managers, the queue database 
contains an additional queue file and journal file for each additional 
queue manager. Additional queue files are named in the format name_of_ 
manager.QMAN$QUEUES. Additional journal files are named in the format 
name_of_manager.QMAN$JOURNAL. ¢ 


SYS$COMMON:[SYSEXE] is the default location for all queue database files. 
However, you might store the files in another location for certain reasons. For 
more information, see Section 12.3. 


12.3 Specifying the Location of Queue Database Files 


If the queue database files are not located in the default location of 
SYS$COMMON:[SYSEXE], you must specify the location of the queue database. 
You would move the files from the default location for the following reasons: 


e Ina VMScluster environment with multiple system disks, the default location 
does not work. The files must be stored on a disk that is shared by all 
VMScluster member nodes. 


With this configuration, you must also make sure the disk holding the master 
file (QMAN$MASTER.DAT) is available to all nodes using the queue database 
at the beginning of system startup. 


¢ In configurations without multiple system disks, to save space on the system 
disk or to help improve performance. To satisfy this reason, moving just the 
queue and journal files is sufficient. 


How to Move the Queue Database Files 
You can move the files in either of the following ways: 


e When you create the queue database file the first time, create them in the 
alternate location: 


1. Define the logical name QMAN$MASTER in SYLOGICALS.COM (to 
specify where the master file is to be created). 


2. Start the queue manager with the START/QUEUE/MANAGER command, 
specifying the dirspec parameter (to specify where the queue and journal 
files are to be created). 


For detailed information, see Section 12.4. 
e If you previously created the files in the default location: 
1. Stop the queue manager 


2. Copy the files to the new location 
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3. Ifyou move the master file, define the logical name QMAN$MASTER on 
all nodes (to specify where the master file is located), and add this logical 
name definition to SYLOGICALS.COM on all nodes. 


4, Restart the queue manager with the START/QUEUE/MANAGER 
command, specifying the dirspec parameter (to specify where the queue 
and journal files are located). 


Section 12.3.1 describes in detail how to specify the location of the master file. 
Section 12.3.2 describes in detail how to specify the location of the queue and 
journal files. 


12.3.1 Master File 


To specify the location of the master file, perform the following steps before 
starting the queue manager and creating the queue database: 


1. Entering a command in the following format: 
DEFINE/SYSTEM/EXECUTIVE_MODE QMAN$MASTER location 


The location parameter specifies the device and directory where the master 
file is to be created. 


In a VMScluster environment, enter this command on every node in the 
VMScluster. 


Note 


In a VMScluster environment, the directory you specify for the master file 
must be available to all nodes in the cluster. If the directory specification 
is a concealed logical name, it must be identically defined on all nodes 

in the VMScluster, and the disk must be mounted on all VMScluster 
member nodes early in system startup. 


2. Add the command you entered in step 1 to the SYLOGICALS.COM startup 
command procedure on every node in the VMScluster environment. 


3. If the location you specify is on a disk other than the node’s system 
disk, add a command to mount the disk in the command procedure 
SYS$MANAGER:SYLOGICALS.COM. Although SYLOGICALS is normally 
used to define logical names, it is important that the disk holding the master 
file be mounted in the SYLOGICALS startup procedure, so the master file is 
available before the job controller starts the queue manager. 


For information on mounting a disk in SYLOGICALS.COM, see the section 
Coordinating Shared System Files with Multiple Common System Disks in 
VMScluster Systems for OpenVMS. 

12.3.2 Queue and Journal Files 


Specify the location of the queue and journal files with the dirspec parameter to 
the START/QUEUE/MANAGER command. 


Note 


In a VMScluster environment, the directory you specify for the queue 
and journal files must be available to all nodes that can run the queue 
manager. If the directory specification is a concealed logical name, it must 
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be identically defined on all nodes in the VMScluster, and the disk must 
be mounted on all nodes capable of running the queue manager. 


Once you enter the START/QUEUE/MANAGER command, the directory location 
you enter is stored in the queue database. If you need to restart the queue 
manager, you do not need to respecify the directory location. 


12.4 Starting the Queue Manager and Creating the Queue Database 


Before you can create any queues, you must create the queue database. Use the 
START/QUEUE/MANAGER command with the /NEW qualifier to start the queue 
manager and create the queue database. You normally need to perform this task 
only once. 


Once you enter the START/QUEUE/MANAGER command, the command 

is stored, along with any qualifier or parameter you entered, in the queue 
database. Thereafter, the job controller automatically starts the queue manager 
during reboot unless a STOP/QUEUE/MANAGER/CLUSTER command has 
been entered. For this reason, you do not need to include the START/QUEUE 
/MANAGER command in your startup command procedure. 


Important 


This section describes how to start the queue manager and create the 
queue database on systems and VMSclusters with a single system disk. 


For systems in a VMScluster with multiple system disks (this includes 
any mixed-architecture VMScluster) you must perform special tasks. For 
instructions, see VMScluster Systems for OpenVMS. 


How to Perform This Task 


1. Make sure the values of the system parameters SCSNODE and 
SCSSYSTEMID match the DECnet for OpenVMS node name and node id. 
. These values must be correctly defined for the queuing system to operate 
correctly. 


Use the PARAMETERS SHOW command of the System Management utility 
(SYSMAN) to determine the value of the system parameters SCSNODE 
and SCSSYSTEMID. Use the Network Control Program (NCP) SHOW 
EXECUTOR SUMMARY command to show the DECnet for OpenVMS node 
name and node id. For more specific instructions, see Section 12.12.5. 


2. If you have only one system disk and you are creating the files in the default 
location, go to step 3. (The default location is SYS$SCOMMON:[SYSEXE].) 


If you want to create the queue database files in a location other than the 
default, do the following: 
a. Read the instructions in Section 12.3. 


b. Choose a location for the queue database files; the files must be stored on 
a disk that is shared by all VMScluster member nodes. You can keep the 
master file in a different location than the queue and journal files, but the 
queue and journal files must reside together in the same directory. 
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c. If you want to move the master file, follow the instructions in 
Section 12.3.1 to define the location of the master file. However, with 
only one system disk, you probably do not need to move the master file; 
moving the queue and journal files should be sufficient. 


d. Make sure the disk or disks that are to hold the queue database files are 
mounted. 


3. Enter a command in the following format: 
START/QUEUE/MANAGER/NEW_VERSION//ON=(node-list)] [dirspec] 


This command starts the queue manager process and, optionally, creates the 
queue database files, where: 


/NEW_VERSION Specifies that a new, empty queue database is to be 
created. Specify this only if you do not have a currently 
functioning database. If you specify this qualifer and you 
already have a queue database, the system will overwrite 
your current queue database. 


/ON=(node-list) Allows you to customize failover of the queue manager. 
For more information, see Section 12.5. 


dirspec Specifies the location of the queue and journal files, as 
explained in Section 12.3.2. Use this parameter if you are 
creating the queue and journal files in a location other 
than the default. 


Caution 


Specify the /NEW_VERSION qualifier only if you want to create a new 
queue database. If your queuing system is already functioning, you 
should not need to create a new queue database. 


If the queue manager does not start, see Section 12.12.1 for a troubleshooting 
checklist. 


For more information on the START/QUEUE/MANAGER command, see the 
OpenVMS DCL Dictionary. 


On VAX systems, for information about creating an additional queue manager see 
Section 12.8. 


Example 


$ DEFINE/SYSTEM/EXECUTIVE MODE QMANSMASTER DUA4: [MASTER] 
$ MOUNT/NOASSIST DUA4: 
! 


! Add the two previous commands to SYLOGICALS.COM 
! 


th 1 


$ START/QUEUE/MANAGER/NEW_VERSION DUA2: [SYSQUE] 

In this example: 

¢ The master file is located in the directory DUA4:[MASTER]. 

¢ The queue and journal files are located in the directory DUA2:[SYSQUE]. 
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12.5 Customizing Queue Manager Failover 


By default, all nodes in a VMScluster environment are able to run the queue 
manager, in no specified order of preference. The /ON qualifier of the START 
/QUEUE/MANAGER command lets you specify a list of VMScluster member 
nodes that can run the queue manager, in the preferred order in which they 
should claim the process. Digital recommends you specify the asterisk character 
(*) at the end of the node list to make sure that at least one node is always 
available to run the queue manager. For more information, see the /ON qualifier 
for the START/QUEUE/MANAGER command in the OpenVMS DCL Dictionary. 


12.6 Stopping the Queue Manager 


To stop the queue manager, enter the DCL command STOP/QUEUE/MANAGER 
/CLUSTER. This command shuts down the queue manager on a standalone node 
or VMScluster node. The queue manager performs the following tasks: 


¢ Aborts all current jobs that cannot be restarted and requeues all current 
restartable jobs 


e Stops all execution queues and disables autostart on all nodes 
¢ Closes all queue database files 


Once the STOP/QUEUE/MANAGER/CLUSTER command is entered, the queue 

manager process remains stopped, and requests to the queuing system are denied 
until you restart the queue manager by entering the START/QUEUE/MANAGER 
command as explained in Section 12.7. VMScluster transitions do not change the 


state of the queue manager. Newly available nodes do not attempt to start the 
queue manager (unless the START/QUEUE/MANAGER command is entered). 


The /CLUSTER qualifier is required to stop the clusterwide queue manager. 
If you enter the obsolete command STOP/QUEUE/MANAGER (without the 
/CLUSTER qualifier), the command performs the same function as the DCL 
command STOP/QUEUES/ON_NODE. 


To stop all queues on a single node without stopping the queue manager, enter 
the STOP/QUEUES/ON_NODE command. 


12.7 Restarting the Queue Manager 


Section 12.4 explains how to start your queue manager the first time with the 
START/QUEUE/MANAGER/NEW_VERSION command. After you initially enter 
the START/QUEUE/MANAGER command with the /NEW_VERSION qualifier, 
you do not normally need to enter the START/QUEUE/MANAGER command 
again. The queue manager is automatically restarted, unless you enter the 
STOP/QUEUE/MANAGER/CLUSTER command. 


However, after starting the queue manager initially, you might need to reenter 
the START/QUEUE/MANAGER command for one of the following reasons: 


e If the STOP/QUEUE/MANAGER/CLUSTER command has been executed, 
enter the START/QUEUE/MANAGER command to restart the queue 
manager. 


¢ Ina VMScluster environment, enter the START/QUEUE/MANAGER 
command with the /ON qualifier to modify the list of preferred nodes on 
which the queue manager can run. For more information, see Section 12.5. 
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¢ In a VMScluster environment, enter the START/QUEUE/MANAGER 
command to ensure that the queue manager process is executing on the most 
preferred, available node. If the queue manager is not running on the most 
preferred, available node, it will be moved to that node without interruption 
of service. If you are using the default node list (*), the queue manager will 


not move. For more information, see the description of the /ON qualifier in 
the OpenVMS DCL Dictionary. 


How to Perform This Task 


To restart the queue manager, use the START/QUEUE/MANAGER command in 
the following format: 


STARTIQUEUE/MANAGER|/ON=(node-list)} [dirspec] 


If you restart the queue manager, you specify the /ON=(node-list) qualifier or 
the dirspec parameter only if you want to change the value you are currently 
using for the qualifier or parameter. The command you enter to start the queue 
manager is stored in the queue database, with any qualifier or parameter you 
specify. If you do not specify a qualifier or parameter, the queue manager is 
started using the node list and location (if any) stored in the queue database. 


For more information about the START/QUEUE/MANAGER command, see the 
OpenVMS DCL Dictionary. 


If the queue manager does not start, see Section 12.12.1 for a troubleshooting 
checklist. 


12.8 Creating an Additional Queue Manager (VAX Only) 


<i> 
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To work around CPU or memory shortages in a VAXcluster environment, you can 
use multiple queue managers to distribute the batch and print work load between 
nodes. For more information, including restrictions for multiple queue managers, 
see Section 12.1.2. 


How to Perform This Task 


1. Follow the steps in Section 12.4. When you enter the START/QUEUE 
/MANAGER command, specify the /ADD and /NAME_OF_ MANAGER 
qualifiers. For example: 


$ START/QUEUE/MANAGER/ADD/NAME OF MANAGER=BATCH MANAGER 


Caution 


Do not specify the /NEW_VERSION qualifier when creating an additional 
queue manager. Multiple queue managers share a single queue database. 
Additional queue and journal files for the additional queue manager will 
automatically be created. 


2. When you create a queue with the INITIALIZE command (as explained in 
Section 13.7.2), specify the name of the queue manager on which it is to run 
by including the /NAME_OF_MANAGER qualifier. 


If you do not specify the /NAME_OF_MANAGER qualifier, the queue will be 
created to run on the default queue manager, SYS$QUEUE_MANAGER. 


To move an existing queue from its original queue manager to a different 
queue manager, delete the queue with the DELETE/QUEVE command and 
re-create the queue with the INITIALIZE/QUEUE command. 
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3. When entering DCL commands to maintain the queue manager, be sure to 
specify the /NAME_OF_MANAGER command to specify the queue manager 
to which the command is to apply. If you do not specify the /NAME_OF_ 
MANAGER qualifier, the command will be executed on the default queue 
manager, SYS$QUEUE_MANAGER. The SHOW QUEUE/MANAGER 
command allows you to display information about the queue managers 
running on your system. 


Example 


$ START/QUEUE/MANAGER/NEW_VERSION/NAME OF MANAGER=PRINT MANAGER - 
$ /ON=(JADE,RUBY, *) 

$ START/QUEUE/MANAGER/ADD/NAME OF MANAGER=BATCH MANAGER - 

_$ /ON=(OPAL, PEARL, *) 

$ SHOW QUEUE/MANAGER/FULL 

Master file: SYSS$SPECIFIC: (SYSEXE]QMANSMASTER. DAT; 


Queue manager PRINT MANAGER, running, on JADE:: 
/ON=( JADE, RUBY, *) 
Database location: SYSS$COMMON: [SYSEXE] 


Queue manager BATCH MANAGER, running, on OPAL:: 
/ON=(OPAL, PEARL, *) 
Database location: SYSSSYSROOT:[SYSEXE] ¢ 


12.9 Displaying Information About the Queue Manager (VAX Only) 


<> 


On VAX systems, to obtain information about one or more queue managers, enter 
the SHOW QUEUE/MANAGER command. 


Example 

$ SHOW QUEUE/MANAGER 

Queue manager PRINT MANAGER, running, on NODEA:: 
Queue manager SYSSQUEUE MANAGER, running, on NODED:: 


$ SHOW QUEUE/MANAGER/FULL 
Master file: SYSS$SPECIFIC:[SYSEXE]QMANSMASTER.DAT; 


Queue manager PRINT MANAGER, running, on NODEA:: 
/ON=(NODEA, NODEB, *) 
Database location: SYS$COMMON: [SYSEXE] 


Queue manager SYSSQUEUE MANAGER, running, on NODED:: 
/ON=(NODEC , NODED , NODEE, *) 
Database location: SYSS$SYSROOT:[SYSEXE] 


For more information, see the OpenVMS DCL Dictionary. ¢ 


12.10 Saving the Queue Database 


You should save a copy of the queue database each time you want to preserve 
changes to your queue configuration. If, for some reason, your queue database 
files are not accessible, you can restore the queue database so you do not need to 
redefine forms and characteristics and reinitialize each queue. 


To save a record-by-record copy of the queue database while the queuing system 
is functioning, perform the following steps. This procedure saves definitions of 
queues, forms, and characteristics. No job information is preserved. 
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How to Perform This Task 


1. Enter an OpenVMS Convert utility (CONVERT) command in the following 
format to save the master file: 


CONVERT/SHARE QMAN$MASTER.DAT master-filename 


For master-filename, specify the name of the file to which 
QMAN$MASTER.DAT is to be copied. 


For more information about CONVERT see the OpenVMS Record 
Management Utilities Reference Manual. 


2. Enter a CONVERT command in the following format to save the queue file: 
CONVERT/SHARE SYS$QUEUE_MANAGER.QMAN$QUEUES queue-filename 


For queue-filename, specify the name of the file to which SYS$QUEUE_ 
MANAGER.QMAN$QUEUES is to be copied. 


3. Use the Backup utility (BACKUP) to save the files created with CONVERT. 
Use a command in the following format: 


BACKUP/LOG masterfile-name,queuefile-name device:saveset-name/LABEL=label 


For more information about the Backup utility, see the OpenVMS System 
Management Utilities Reference Manual. 


Example 


$ SET DEFAULT SYSSCOMMON: [SYSEXE] 

$ CONVERT/SHARE QMANSMASTER.DAT MASTERFILE 9SEP.KEEP; 

$ CONVERT/SHARE SYSSQUEUE_MANAGER. QMANSQUEUES QFILE | 9SEP. KEEP; 

$ INITIALIZE MUA0: QDB 

$ MOUNT/FOREIGN MUA0: 

$MOUNT-I-MOUNTED, QDB mounted on LILITHS$MUAO: 

$ BACKUP/LOG MASTERFILE 9SEP.KEEP,| ,QOFILE 9SEP.KEEP MUA0:QDB_9SEP.SAV/LABEL=QDB 
SBACKUP-S-COPIED, copied SYSSCOMMON : [SYSEXE ]MASTERFILE _ QSEP.KEEP; 

$BACKUP-S- -COPIED, copied SYS$COMMON: [SYSEXE]QFILE_ 9SEP. KEEP; 

$ DISMOUNT MUAO: 


12.11 Restoring the Queue Database 
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If, for some reason, you lose the queue database, you can restore your queue 
configuration from copies you saved as explained in Section 12.10. All 
queue, form, characteristic, and queue manager information will be restored. 
Information about jobs in the queues will not be restored. 


How to Perform This Task 


1. Ifthe queue manager is running, stop it by entering the DCL command STOP 
/QUEUE/MANAGER/CLUSTER. 


2. Delete all three queue database files. You must delete all three files, even if 
only one or two of them are lost. 


3. Use the Backup utility (BACKUP) to restore the queue file and master file 
from the save set you created in step 3 of Section 12.10. If the master file or 
queue file is stored in a location other than the default, make sure you restore 
it to the correct location or specify the new location when starting the queue 
manager. 
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Note 


When you restore your queue database, you must always restore both the 
master and queue file of the database, even if you lost only one of those 
files. 


4. Start the queue manager with the START/QUEUE/MANAGER command 
as you would normally. Do not enter the /NEW_VERSION qualifier. A new 
(empty) journal file will automatically be created. 


Example 

$ STOP/QUEUE/MANAGER/CLUSTER 

$§ SET DEFAULT SYSSCOMMON: [SYSEXE ] 

$ DELETE SYSSQUEUE_MANAGER.QMANSJOURNAL; , SYSSQUEUE_MANAGER.QMANSQUEUES;, - 
_$ QMANSMASTER. DAT; 

S$ MOUNT/FOREIGN MUAO: 

$MOUNT-I-MOUNTED, QDB mounted on LILITHS$MUAO: 

$ BACKUP/LOG MUA0:QDB_9SEP.SAV/SELECT=[SYSEXE]MASTERFILE 9SEP.KEEP; - 

_$ QMANS$MASTER. DAT; 

$BACKUP-S-CREATED, created SYSSCOMMON: [SYSEXE ]QMANSMASTER. DAT; 1 

$ SET MAGTAPE/REWIND MUAO: 

$ BACKUP/LOG MUA0:QDB_9SEP.SAV/SELECT=[SYSEXE]QFILE 9SEP.KEEP; - 

_$ SYSS$QUEUE_MANAGER.QMANSQUEUES 

SBACKUP-S-CREATED, created SYSSCOMMON: [SYSEXE]SYSS$QUEUE_MANAGER.QMANSQUEUES ; 1 
$ DISMOUNT MUAO: 

$ START/QUEUE/MANAGER 


12.12 Solving Queue Manager Problems 


Use the following sections to help solve queue manager problems. 


Topic For More Information 
Avoiding common problems: a troubleshooting checklist Section 12.12.1 
If the queue manager does not start Section 12.12.2 


If the queuing system stops or the queue manager does not runon_ Section 12.12.3 
certain nodes ; 


If the queue manager becomes unavailable Section 12.12.4 
If the queuing system does not work on a certain VMScluster node Section 12.12.5 


If you see inconsistent queuing behavior on different VMScluster Section 12.12.6 
nodes 


Reporting a queuing system problem to Digital Section 12.13 


12.12.1 Avoiding Common Problems: A Troubleshooting Checklist 


To avoid the most common queuing system problems, make sure you have met 
the following requirements: 


Requirement For More Information 


QMAN$MASTER (if defined) is correctly defined on all nodes in Section 12.3 
the cluster. 


The queue database is in the specified location. Section 12.3 


The queue database disk is mounted and available. Section 12.3 
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Requirement . For More Information 


The system parameters SCSNODE and SCSSYSTEMID match Section 12.12.5 
the DECnet for OpenVMS node name and node id. 


The node list specified /ON qualifier contains a sufficient number Section 12.12.4 
of nodes. If you specify a ndoe list, Digital recommends you 
include an asterisk (*) at the end of the node list. 


12.12.2 If the Queue Manager Does Not Start 


12.12.2.1 
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If the queue manager does not start when you enter the START/QUEUE 
/MANAGER command, the system displays the following message: 


%JBC-E-QMANNOTSTARTED, queue manager could not be started 


Investigating the Problem 


Search the operator log file SYSSMANAGER:OPERATOR.LOG (or look on the 
operator console) for messages from the queue manager and job controller for 
information about the problem, as follows: 


$ SEARCH SYS$MANAGER:OPERATOR.LOG/WINDOW=5 QUEUE MANAGE, JOB_CONTROL 


Use the information provided with these messages to further investigate the 
problem. 


On VAX systems with multiple queue managers, also search for messages 
displayed by additional queue managers by including their process names in 
the search string. To display information about queue managers running on 
your system, use the SHOW QUEUE MANAGERS command as explained in 
Section 12.9. For more information about multiple queue managers and their 
process names, see Section 12.1.2. ¢ 


Example 


$ START/QUEUE/MANAGER DUA55:[SYSQUE] 1) 

$JBC-E-QMANNOTSTARTED, queue manager could not be started @ 

$ SEARCH SYSSMANAGER:OPERATOR.LOG /WINDOW=5 QUEUE MANAGE,JOB_ CONTROL © 
$ESEESEEEEE OPCOM 14-AUG-1994 18:55:18.23 %%%%33%%3%% 

Message from user QUEUE MANAGE on CATNIP 

SQMAN-E-OPENERR, error opening DUA55:[SYSQUE]SYSS$QUEUE MANAGER .QMANSQUEUES; 


SESEESEESEE OPCOM 14-AUG-1994 18:55:18.29 %3%3%3%3S3% 
Message from user QUEUE MANAGE on CATNIP 
-RMS-F-DEV, error in device name or inappropriate device type for operation 


$SEEESEEES% OPCOM 14-AUG-1994 18:55:18.31 %%%%%3333%% 
Message from user QUEUE MANAGE on CATNIP 


-SYSTEM-W-NOSUCHDEV, no such device available O 
$ START/QUEUE/MANAGER DUAS:(SYSQUE] @ 


@ This command attempts to start the queue manager specifying 
DUA55:[SYSQUE] as the location of the queue and journal files. 


The error message indicates that the queue manager did not start. 
This command searches the operator log file for relevant messages. 


One of the messages reveals that the queue file could not be opened because 
device DUA55: does not exist. 


This command successfully starts the queue manager, specifying 
DUA5:[SYSQUE] as the correct location for the queue and journal files. 


o 809 


Managing the Queue Manager and Queue Database 
12.12 Solving Queue Manager Problems 


{ 


12.12.3 If the Queuing System Stops or the Queue Manager Does Not Run on 


12.12.3.1 


gs 


Certain Nodes 


Use this section if the queue manager does not run on a certain node in the 
cluster, or if the queuing system stops, especially after one of the following: 


e The node on which the queue manager was running leaves the cluster. 
e A new node boots into the cluster. 


e You change the node list specified with the /ON qualifier of the START 
/QUEUE/MANAGER command. 


¢ You start the queue manager after moving the queue database. 


Investigating the Problem 


Check the operator log that was current at the time the queue manager started 
up or failed over. Search the log for operator messages from the queue manager 
(QUEUE_MANAGE process name). 


On VAX systems with multiple queue managers, also search for messages 
displayed by additional queue managers, by including their process names in 
the search string. To display information about queue managers running on 
your system, use the SHOW QUEUE MANAGERS command as explained in 
Section 12.9 For more information about multiple queue managers and their 
process names, see the Section 12.1.2. ¢ 


The following messages indicate that the queue database is not in the specified 
location: 


SESSESSS33S OPCOM  4~-FEB-1993 15:06:25.21 %8%33%%%8%% 
Message from user QUEUE MANAGE on MANGLR 
%QMAN-E-OPENERR, error opening CLU$COMMON: [SYSEXE]SYS$QUEUE_MANAGER.QMANSQUEUES; 


SESESSSSSEB OPCOM  4-FEB-1993 15:06:27.29 %%%%%%%33%% 
Message from user QUEUE MANAGE on MANGLR 
~RMS-E-FNF, file not found 


SSBSESESEEB OPCOM 4-FEB-1993 15:06:27.45  %3%%333S3F 
Message from user QUEUE MANAGE on MANGLR 
-SYSTEM-W-NOSUCHFILE, no such file 


The following messages indicate that the queue database disk is not mounted: 


BSSSEESEESS OPCOM  4-FEB-1993 15:36:49.15 %8%3%%338%% 
Message from user QUEUE MANAGE on MANGLR 
$QMAN-E-OPENERR, error opening DISK888: [QUEUE DATABASE ]SYSSQUEUE_MANAGER.QMANSQUEUES; 


BESESESEEEB OPCOM  4-FEB-1993 15:36:51.69 %%%3%%3%3%333% 
Message from user QUEUE MANAGE on MANGLR 
~RMS-F-DEV, error in device name or inappropriate device type for operation 


SESESSESES% OPCOM 4-FEB~1993 15:36:52.20 %%3%33333%3 
Message from user QUEUE MANAGE on MANGLR 
-SYSTEM-W-NOSUCHDEV, no such device available 


12.12.3.2 Cause 


The queuing system does not work correctly under the following circumstances: 


¢ Ifthe dirspec parameter specified with the START/QUEUE/MANAGER 
command (specifying the location of the queue and journal files) is not 
translated exactly the same on all nodes, and the queue manager starts 
on one of the affected nodes. You typically find this problem in a VMScluster 
environment when you add an additional system disk or move the queue 
database. 
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e Ifthe queue database disk is not mounted for the node on which the queue 
manager attempts to run. 


In general, the queuing system will be shut off completely if the queue manager 
encounters a serious error and forces a crash or failover twice in two minutes 
consecutively on the same node. Therefore, the queuing system may have 
stopped, or it may continue to run if the queue manager moves to yet another 
node on which it can access the database after the original failed startup. 


12.12.3.3 Correcting the Problem 
Perform the following steps: 


1. If the queue manager is stopped, enter the START/QUEUE/MANAGER 
command and include the following: 


e An appropriate list of nodes with the /ON qualifier. 


¢ The appropriate dirspec parameter (to specify the location of the queue 
and journal files). All the nodes included in the node list with the /ON 
qualifier must be able to access this directory. 


2. On all nodes specified in the node list, (except on any nodes that boot from 
the disk where the queue database files are stored), add a MOUNT command 
to the SYLOGICALS.COM procedure to mount the disk that holds the master 
file. Yo do not need to explicitly mount the disk on a node where it is the 
system disk. 


12.12.4 If the Queue Manager Becomes Unavailable 
If the queue manager will not start or has stopped running, an insufficient 


failover node list might have been specified for the queue manager, such that 
none of the nodes in the failover list is available to run the queue manager. 


12.12.4.1 Correcting the Problem 
Make sure the queue manager node list contains a sufficient number of nodes 
by entering the START/QUEUE/MANAGER command and specifying a node list 
appropriate for your configuration with the /ON qualifier. For more information, 
see the START/QUEUE/MANAGER command in the OpenVMS DCL Dictionary. 


If you are in doubt about what nodes to specify, Digital recommends you specify 
an asterisk (*) wildcard character as the last node in the list to specify that 
any remaining node in the VMScluster can run the queue manager. Specifying 
the asterisk wildcard prevents your queue manager from becoming unavailable 
because of an insufficient node list. 


12.12.5 If the Queuing System Does Not Work on a Certain VMScluster Node 
Use this section if the queuing system does not work on a certain node when it 
starts up. 

12.12.5.1 Investigating the Problem 
Perform the following steps: 


1. Search the operator log that was current when the problem existed for the 
following messages; these messages are broadcast every 30 seconds after the 
affected node boots: 
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$3%3%$33333%% OPCOM 4-FEB-1993 15:36:49.15 %%3%%%33%3%%%% 
Message from user QUEUE MANAGE on ZNFNDL 
%QMAN-E-COMMERROR, unexpected error #5 in communicating with node CSID 000000 


$SESS3S33S% OPCOM 4-FEB-1993 15:36:49.15 %3%%3%333333% 
Message from user QUEUE MANAGE on ZNFNDL 
~SYSTEM-F-WRONGACP, wrong ACP for device_ 


Compare the node’s value for the system parameters SCSNODE and 
SCSSYSTEMID with the values for the DECnet for OpenVMS node name 
and node id, as follows: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> PARAMETERS SHOW SCSSYSTEMID 


Parameter Name Current Default Min. Max. Unit Dynamic 
SCSSYSTEMID try ;. > es -1 Pure-nunbe 
SYSMAN> PARAMETERS SHOW SCSNODE 

Parameter Name Current Default Min. Max. Unit Dynamic 
SCSNODE ‘RANDY "0" "0 "2RRg" Ascii 
SYSMAN> EXIT 


$ RUN SYSSSYSTEM:NCP 
NCP> SHOW EXECUTOR SUMMARY 


Node Volatile Summary as of 5-FEB-1993 15:50:36 
Executor node = 19.45 (DREAMR) 


State = on 

Identification = DECnet for OpenVMS VAX V6.0 
NcP> EXIT 

$ WRITE SYSSOUTPUT 19*1024+45 

19501 


If the DECnet for OpenVMS node name and node id do not match the SCSNODE 
and SCSSYSTEMID system parameters, IPC (interprocess communication, an 
operating system internal mechanism) cannot work properly and the affected 
node will not be able to participate in the queuing system. 


12.12.5.3 Correcting the Problem 
Perform the following steps: 


1. 


2. 


Modify the system parameters SCSNODE and SCSSYSTEMID or modify the 
DECnet for OpenVMS node name and node id, so the values match. 


For more information on these system parameters, see the OpenVMS System 
Management Utilities Reference Manual. For more information on the 
DECnet for OpenVMS node name and node id, see the DECnet for OpenVMS 
Guide to Networking. 


Reboot the system. 
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12.12.6 If You See Inconsistent Queuing Behavior on Different VMScluster 


12.12.6.1 


12.12.6.2 Cause 
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Nodes 


Use this section if you see the following symptoms: 


After submitting a print job, you can display the job with a SHOW ENTRY 
command on the same node, but not on other nodes in the VMScluster 
environment. 


After defining or modifying a queue, the changes appear in a SHOW QUEUE 
display on some nodes, but not on others. . 


You can successfully submit or print a job on some nodes but on other nodes, 
you receive a JOBQUEDIS error. 


Investigating the Problem 
Perform the following steps: 


1. 


Use the SHOW LOGICAL command to translate the QMAN$MASTER 
logical name within the environment of each node in the VMScluster. If 


there is no translation on any given node, then translate the default value of 
SYS$COMMON:[SYSEXE]. 


If the SHOW LOGICAL translations show a different physical disk name on 
one or more nodes, you have identified the problem. 


Check the operator log files that were current at the time that one of the 
affected nodes booted. Search for an OPCOM message similar to the following 
from the process JOB_CONTROL: 


BEEESSEESEB ~ OPCOM  4-FEB-1993 14:41:20.88 %&%%33%33%% 
Message from user JOB CONTROL on MANGLR 
tJBC-E-OPENERR, error opening BOGUS: [QUEUE DIR]QMANSMASTER.DAT; 


BESSSEEEEEE OPCOM 4-FEB-1993 14:41:21.12 %%8%%%%%33% 
Message from user JOB CONTROL on MANGLR 
-RMS-E-FNF, file not found 


This problem may be caused by different definitions for the logical name 
QMAN$MASTER on different nodes in the cluster, causing multiple queuing 
environments. You typically find this problem in VMScluster environments when 
you have just added an additional system disk or moved the queuing database. 


12.12.6.3 Correcting the Problem 
Perform the following steps: 


1. 


If only one queue manager and queue database exist, skip to Step 2. 


If more than one queue manager and database exist, perform the following 
steps: 


a. Enter STOP/QUEUE/MANAGER/CLUSTER on one of the nodes where 
the QMAN$MASTER logical name is incorrectly defined to stop the 
invalid queue manager. 


b. Delete all three files for the invalid queue database. (On VAX systems 
with multiple queue managers, you might have more than three invalid 
files.) 


Reassign the logical name QMAN$MASTER on the affected systems and 
correct the definition in the startup procedure where the logical name is 
defined (usually SYLOGICALS.COM. ) 
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3. Enter a STOP/QUEUE/MANAGER/CLUSTER command on an unaffected 
node to stop the valid queue manager. 


4. Enter START/QUEUE/MANAGER on any node and verify that the queuing 
system is working properly. 


12.13 Reporting a Queuing System Problem to Digital 


If you encounter problems with the queuing system that you need to report to 
Digital, provide the information in the following table. This information will help 
Digital representatives to diagnose your problem. Please provide as much of the 
information as possible. 


Information 


Summary of the problem 


Steps for reproducing the 
problem 


Configuration information 


+On VAX systems, output from 
the SHOW QUEUE/MANAGER 
/FULL command 


Location of the queue and 
journal files 


{VAX specific 


Description 
Include the following: 


e The environment in which the problem occurred. For example, 
does the problem occur only on certain nodes, from certain user 
accounts, or when using certain layered products? 


¢ How this problem affects your operations. What site operations are 
being affected (for example, printing checks or submitting crucial 
batch jobs)? How often does the problem occur (for example, one 
printout per month, several printouts per day)? 


¢ What events occurred on the system between the time the queuing 
system operated correctly and the time the problem appeared. 


e Any workarounds you are currently using. 


Specify the exact steps and include a list of any special hardware or 
software required to reproduce the problem. 


For example: 


e¢ Is the configuration a VMScluster system, and does it have multiple 
system disks? 


¢ Do you intend the queue database to be located in the default 
location (SYS$COMMON:[SYSEXE])? Do you intend the master file 
to be included in a different location than the queue and journal 
files? 


Use SYSMAN to enter the command on all nodes, as follows: 


$ RUN SYSSSYSTEM: SYSMAN 

SYSMAN> SET ENVIRONMENT/CLUSTER 

SYSMAN> DO/OUTPUT SHOW QUEUE/MANAGERS/FULL 
SYSMAN> EXIT 

$ TYPE SYSMAN.LIS 


Type the output file SYSMAN.LIS to verify that the output for all nodes 
match. 


If possible, find out the most recent value that was specified in the 
dirspec parameter of the START/QUEUE/MANAGER command 
(to specify the location of the queue and journal files). If none was 
specified, the default is SYS$COMMON:[SYSEXE]. 
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information 


Translation of QMAN$MASTER 
logical name 


Operator log file output 


Information returned from 
relevent DCL commands 


A copy of the journal file of the 
queue database 


Copies of any process dumps 
that might have been created 


Output from the SHOW QUEUE 
command 


Any other relevent information 


VAX specific 
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Description 
Verify that the translation is the same on all nodes. 
Enter the following commands, and include the resulting output: 


$ RUN SYSSSYSTEM: SYSMAN 
SYSMAN> SET ENVIRONMENT/CLUSTER 
SYSMAN> DO SHOW LOGICAL QMANSMASTER 


If the translations returned from the SHOW LOGICAL command are 
not physical disk names, repeat the SHOW LOGICAL command within 
the environment of each node to translate the returned value until you 
reach a translation that includes the physical device name. 


Enter the following commands to search the operator log for any 
message output by the job controller or queue manager: 


$ SEARCH SYS$MANAGER:OPERATOR.LOG/WINDOW=5 - 
_$ JOB_CONTROL, QUEUE_MANAGE 


+On VAX systems with multiple queue managers, for queue managers 
other than the default, specify the first 12 characters of the queue 
manager name of any additional queue manager. For example, for a 
queue manager named PRINT_MANAGER, specify PRINT_MANAGE 
as follows: 


$ SEARCH SYSSMANAGER:OPERATOR.LOG/WINDOW=5 - 
_$ JOB_CONTROL, QUEUE MANAGE, PRINT MANAGE 


Include this information if entering a DCL command shows evidence of 
the problem. 


Use the Backup utility (BACKUP) with the IGNORE=INTERLOCK 
qualifier to create a copy of the file SYS$QUEUE_ 
MANAGER.QMAN$JOURNAL, and provide this copy to Digital. 


+On VAX systems with multiple queue managers, include copies 

of journal files for all queue managers. Journal files for queue 
managers other than the default are named in the format name_of_ 
manager.QMAN$JOURNAL. 


Perform the following steps to find any related process dumps, and 
provide copies of the files to Digital: 


$ RUN SYSSSYSTEM:SYSMAN 

SYSMAN> SET ENVIRONMENT/CLUSTER 

SYSMAN> DO DIRECTORY/DATE SYSSSPECIFIC:[SYSEXE]JBC$*.DMP, - 
_SYSMAN> QMANS*.DMP, PRTSMB.DMP, LATSYM. DMP 


If the problem involves an execution queue using a symbiont other 
than PRTSMB or LATSYM, also include process dump files from the 
symbiont. The file name has the format image_file_name.DMP. 


If your problem affects individual queues, enter the SHOW QUEUE 
command to show each affected queue. 


For example: 


e When was the queue database last created or modified? Was it 
created or modified since the last reboot of the node or nodes? 


¢ Does the IPCACP process exist on the affected nodes? If not, try to 
determine whether the process existed earlier. For example, check 
the system accounting records. 
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If you have a printer connected to your system, or if you want to use batch 


processing, you must use queues. A queue allows users to submit requests for 
printing or batch processing. The system prints or processes the users’ jobs as 


resources allow. 


Before working with queues, you must start the queue manager and create the 


queue database. Section 12.4 describes this task. 


Information Provided in This Chapter 
This chapter describes the following tasks: 


Task 


Managing queues on small systems 
Designing your batch queue environment 
Designing your output queue environment 
Setting up and starting queues 

Using queue options 

Managing queues 

Managing characteristics 

Managing forms 

Managing device control libraries 
Managing jobs 


Solving queue problems 


This chapter explains the following concepts: 


Concept 


Queuing process 

Types of queues 

Autostart feature 

Options for controlling access to queues 
Job retention 

Queue characteristics 

Batch processing options 

Job scheduling options 

Banner pages 


Forms and stock 


Section 


Section 13.1 
Section 13.5 
Section 13.6 
Section 13.7 
Section 13.8 
Section 13.9.1 
Section 13.9.2 
Section 13.9.4 
Section 13.9.5 
Section 13.9.6 
Section 13.10 


Section 


Section 13.2 

Section 13.3 

Section 13.4 

Section 13.8.1 
Section 13.8.2 
Section 13.8.3 
Section 13.8.5 
Section 13.8.6 
Section 13.8.7 
Section 13.8.9 
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Concept Section 


Device control libraries Section 13.8.12 


13.1 Managing Queues on Small Systems 


Many of the features available for queues are not required on small systems with 
minimal queuing needs (for example, on workstations). If you are managing a 
small system, you probably need only the information in the following sections: 


Topic Section 
Simple batch queue configuration Section 13.5.1 
Simple output queue configuration Section 13.6.1 
Setting up and starting queues Section 13.7 
Choosing and specifying queue options Section 13.8 
Managing queues Section 13.9.1 
Managing jobs in queues Section 13.9.6 


13.2 Understanding the Queuing Process 


When a user submits a batch or print job, either by entering the DCL command 
SUBMIT or PRINT or through an application, the job is sent to a queue for 
processing. Information about the user’s queue request, including the type of 
job, the file name or names, the name of the queue, and any special options, is 
sent to the queue manager. The queue manager stores and retrieves appropriate 
information from the queue database to print or execute the job. For more 
information on the queue manager and queue database, see Chapter 12. 


The queue manager places the job in the appropriate queue to await its turn 
for processing. Only one print job can be printed on a printer at a single time; 
however, more than one batch job can execute simultaneously in a batch queue. 


Print jobs are sent to an independent process, called a symbiont, for formatting; 
the symbiont sends the formatted job to the appropriate printer. For batch jobs, 
the job controller creates a process to perform the tasks in the batch job. 


13.3 Understanding Types of Queues 
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Batch and print queues can be divided into two general classes: 


Class Description 
Execution queues Queues that accept batch or print jobs for processing. 
Generic queues Queues that hold jobs until they are transferred to an 


execution queue for processing. A generic queue holds a 

job until an appropriate execution queue becomes available to 
initiate the job. The queue manager then requeues the job to 
the available execution queue. 


An execution and generic queue can be classified as either a batch or output 
queue. The following sections provide more details about execution and generic 
queues. 
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13.3 Understanding Types of Queues 


13.3.1 Batch Execution Queues 


A batch execution queue can accept only batch jobs. A batch job executes as a 
detached process that sequentially runs one or more command procedures. The 
user defines the list of command procedures when submitting the job. 


13.3.2 Output Execution Queues 


An output execution queue accepts jobs for processing by a symbiont. The 
queue manager sends the symbiont a list of files, which the user defines when 
submitting the job. An output symbiont transfers data from a disk to an output 
device. As the symbiont processes each file, it produces output for the device it 
controls, such as a printer or a terminal. 


The standard print symbiont provided by the operating system is named 
PRTSMB and is designed to print files on hardcopy devices. The LAT print 
symbiont LATSYM is used to print files on output devices attached to LAT ports. 
User-modified or user-written symbionts can also be designed for this or any 
other file processing activity managed by the OpenVMS batch and print queuing 
system. Output execution queues include the following types: 


Type Description 

Printer queue Uses a symbiont to direct output to a printer. 

Terminal queue Uses a symbiont to direct output to a terminal printer. 

Server queue Uses a user-modified or user-written symbiont to process the files 


that belong to jobs in the queue. 


When you create an output execution queue, you designate it as either a printer, 
a terminal, or a server execution queue; you can also specify the symbiont to be 
associated with the queue. However, when the queue is started, the symbiont 
process associated with the queue can override the queue designation if the 
queue type specified does not match the type of device. The standard symbiont 
provided with the operating system determines whether it is controlling a printer 
or a terminal. It communicates this information to the queue manager and, 

if necessary, the queue manager changes the type designation of the output 
execution queue. By convention, a user-written or user-modified symbiont that 
does not deliver output to a printer defines its queue as a server queue. 


13.3.3 Generic Batch Queues 


A generic batch queue can direct jobs only to batch execution queues. Generic 
batch queues are typically used in VMScluster environments to distribute the 
batch work load across several nodes (see Section 13.5.3). Generic batch queues 
are not automatically stopped when a node is shut down. Therefore, they do not 
need to be started when a node reboots. 


13.3.4 Generic Output Queues 


A generic output queue can direct jobs to any of the three types of output 
execution queues: print, terminal, or server. Generic output queues are 
typically used to distribute the output work load among several like printers 
(see Section 13.6.5). 


Generic output queues are not automatically stopped when a node is shut down. 
Therefore, they do not need to be started when a node reboots. 
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13.3.4.1 Logical Queues 


A logical queue is a special type of generic output queue that transfers jobs to 
another output execution queue. You might use this kind of queue to temporarily 
redirect a queue when the device on which it runs is broken. 


A logical queue transfers its jobs into the execution queue specified with the 
ASSIGN/QUEUE command. For information on setting up a logical queue, see 
Section 13.9.1.14. 


13.4 Understanding the Autostart Feature 


Digital recommends you use autostart queues whenever possible. The autostart 
feature simplifies startup and ensures high availability of execution queues. It 
lets you do the following: 


e Start all autostart queues on a node with a single command 


e¢ Specify a list of nodes (within a VMScluster environment) to which a queue 
can automatically attempt to fail over if necessary 


Autostart’s failover feature is particularly useful on LAT queues. Because 
LAT printers are usually shared among users of multiple systems or 
VMScluster systems, many users will be affected if a LAT queue is 
unavailable. For highest availability, set up your LAT queues with a list 
of nodes to which the queue can fail over, so the queue will continue to run 
even if a node becomes unavailable. 


To use autostart queues, you must do the following: 


Task For More Information 
Enable autostart on a node. You can do this before or after you Section 13.9.1.3 
create a queue. 


Create the queue as an autostart queue and, optionally, specify a Section 13.7.2.2 
failover list. 


Activate the queue for autostart. You can do this when you create Section 13.9.1.4 
the queue, or after. 


When you enable autostart on a node, all stopped, active autostart queues capable 
of running on the node are automatically started by the queue manager. Any 
autostart queue that fails over to the node is also automatically started. 


13.5 Designing Your Batch Queue Environment 
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Use the following sample configurations to design your batch processing 
environment. Your configuration may combine elements from several of these 
examples. 


Configuration For More Information 


A single queue for limited batch processing Section 13.5.1 


Multiple queues for heavy batch processing, or customized queues _ Section 13.5.2 
for specialized batch processing 


A VMScluster environment Section 13.5.3 
Queues that must be highly available Section 13.4 
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This section provides examples of some typical batch configurations. Use these 
sample configurations to design your batch environment. Your configuration will 
probably combine elements from several of these examples. 


13.5.1 Simple Batch Queue Configuration: For Limited Batch Needs 
Figure 13-1 illustrates a single, default batch queue. This simple configuration is 
suitable for a standalone system supporting mainly interactive processing. 


Figure 13-1 Default Batch Queue 
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By default, when a user submits a batch job with the SUBMIT command, the job 
is placed in the queue named SYS$BATCH. To set up a single default queue on a 
standalone system, name the queue SYS$BATCH. 
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13.5.2 Specialized Batch Queues: Meeting Special Needs 


If your users rely heavily on batch processing or have special processing needs, 
you might want to set up more than one queue. You can customize batch queues 
to handle specialized jobs by specifying performance and resource options for jobs 
in the queue. For more information, see Section 13.8.5. 


The configuration illustrated in Figure 13-2 has several queues, each customized 
to process certain types of batch jobs. 


Figure 13-2 Multiple Batch Queues with Special Resource and Performance Options 
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In this example, SYS$BATCH is the default queue. Normal batch jobs of no 
special importance would typically be submitted to this queue. FAST is a queue 
for executing high-priority jobs that should not be swapped out of memory. 
SLOW is a background queue for processing low-priority jobs. Typically, these 
are large jobs with large requirements for physical memory. Be conservative 
when changing base priority and swapping on a queue. Even a slight change 
can have a significant negative effect on batch and interactive performance. For 
example, even an increase of 1 in a queue’s base priority can affect performance 
significantly. 


For information about specifying these options for a batch queue, see 
Section 13.8.5. 
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13.5.3 Generic Batch Queues in a VMScluster: Distributing the Work Load 


Generic queues can be used in a VMScluster environment to balance the use 

of processing resources by distributing batch processing across nodes in the 
VMSecluster. (For an explanation of generic queues, see Section 13.3.) Figure 13-3 
illustrates a typical configuration. 


Figure 13-3 Batch Queue Configuration with Clusterwide Generic Queue 
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In this example, a generic batch queue named SYS$BATCH is set up to feed 
jobs to execution queues on each node in the VMScluster. When a user submits 
a job to the clusterwide generic queue SYS$BATCH, the job is placed in the 
appropriate execution queue to minimize the ratio of executing jobs to job limits 
for all execution queues fed by SYS$BATCH. For example, suppose execution 
queues MOE_BATCH, LARRY_BATCH, and CURLY_BATCH all have a job limit 
of 5. If MOE_BATCH and LARRY_BATCH are executing four jobs and CURLY_ 
BATCH is executing one job, the generic queue SYS$BATCH will feed the next 
job to CURLY_BATCH. 


See VMScluster Systems for OpenVMS for more information about VMScluster 
queue configurations. For information about how to create a generic queue, see 
Section 13.7.2.3. 
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13.6 Designing Your Output Queue Environment 


Use the following sample configurations to design your output environment. Your 
configuration will probably combine elements from several of these examples. 


Configuration For More Information 
Queues that must be highly available Section 13.4 
A single print queue for limited printing Section 13.6.1 
Printers of different types Section 13.6.2 
PostScript printing Section 13.6.3 
Access to printers from multiple systems Section 13.6.4 
Multiple printers of the same type Section 13.6.5 
A VMScluster environment Section 13.6.6 
Applications that print output by writing directly to a printer Section 13.6.7 
rather than submitting to an output queue 

Distributed printing Section 13.6.8 


13.6.1 Simple Output Queue Configuration: For Limited Printing Needs 
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Figure 13—4 illustrates a very simple queue configuration. This configuration is 
appropriate for a standalone system supporting a single printer. 


Figure 13-4 Simple Output Queue 
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By default, when a user submits a print job with the PRINT command, the job is 
placed in the queue named SYS$PRINT. To set up a single default printer queue 
on a standalone system, name the queue SYS$PRINT. 
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13.6.2 Mixed Printers: Specialized Output Execution Queues 


If you have several different kinds printers (for example, an LNO3 printer, an 
LA210 printer, and an LP27 line printer), you will need to set up a separate 
queue for each printer. The options, such as the default form or device control 
library, that you use with these queues will probably differ according to the 
printer to which the queue’s output is sent. For example, the default form for a 
line printer might have a width of 132 columns, while the default form for an 
LNO8 printer might have a width of 80 columns. Figure 13-5 illustrates such a 
configuration. 


Figure 13-5 Queue Configuration with Mixed Printers 
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13.6.3 PostScript Printing 


The operating system does not include software to support PostScript printing. In 
order to print PostScript files, you must have either of the following: 


e A printer capable of printing PostScript files, and supporting software 
¢ Software that provides PostScript-to-sixel printing, and a supported printer 


For more information, see your Digital sales representative. 
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13.6.4 LAT Printers: Sharing Printers Among Multiple Systems 
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To share printers among multiple systems, or VMScluster environments, you can 
connect printers to a LAT port on a terminal server. Figure 13-6 illustrates an 
output queue configuration with a remote printer on a terminal server. 


Figure 13-6 Configuration for Remote Printers on a Terminal Server 
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Digital recommends you set up your LAT queues as autostart queues with failover 
lists to ensure that these queues are highly available. Because LAT printers are 
usually shared among users of multiple systems or VMSclusters, many users will 
be affected if a LAT queue is unavailable. For more information on the autostart 
feature, see Section 13.4. For information about how to create autostart queues 
with failover lists, see Section 13.7.2.2. 
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13.6.5 Generic Output Queues: Distributing the Work Load 


If you have more than one printer of the same kind (for example, if you have 
three line printers), you should use generic queues to balance the print load 
among the printers. Figure 13-7 illustrates such a configuration. 


Figure 13-7 Queue Configuration with Three Like Printers and a Generic 
Queue 
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For information about how to create a generic queue, see Section 13.7.2.3. 


~“ 
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13.6.6 VMScluster Queues: Sharing Devices in a Cluster 


Figure 13-8 illustrates a typical VMScluster output queue configuration. For 
information about VMScluster queue configurations, see VMScluster Systems for 
OpenVMS. 


Figure 13-8 Output Queue Configuration in a VMScluster 
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13.6.7 Spooled Printers: Printing from Applications 


If your system runs application programs that write output directly to a printer 
rather than submitting it to an output queue, or if you will be using LAT 
queues, you should spool your printers. Spooling your printers causes application 
programs to write output to an intermediate storage device so that the printer 
remains available to other users while the program is running. 


Figure 13-9 illustrates an output configuration with spooled printers. 


Figure 13-9 Queue Configuration with Spooled Devices 
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For more information about spooling printers see Section 7.6.2.1. 


13.6.8 Distributed Printing 


The OpenVMS batch and print queuing system enables users to print files on 
output devices attached to the local system or VMScluster. 


The Distributed Queuing Service (DQS) is a layered product that extends 
the printing capabilities of the OpenVMS queuing system to a distributed 
environment. DQS enables users to print files on output devices attached to 
remote nodes in your network. 
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For more information, see your DQS documentation or your Digital sales 
representative. 


13.7 Setting Up and Starting Queues 


You must create queues in order for users to submit jobs; you must start the 
queues so that jobs can begin processing. To set up and start queues, perform the 
following tasks, in order: 


Task For More Information 


Make sure you have started the queue manager and created the Section 12.4 
queue database. 


If your configuration includes output queues, set up output devices Section 13.7.1 
and create a command procedure to set up the devices on reboot. 


If you plan to use any queue options, such as forms and Section 13.8 
characteristics and banner pages, determine the qualifiers 

needed to specify those options. In addition, define any forms 

and characterisics you will use before you create queues. 


Create and start queues. Section 13.7.2 


Create a command procedure to perform the necessary setup tasks Section 13.7.2 
each time your system reboots. 


13.7.1 Setting Up Output Devices 
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Before creating output queues, you must set up the devices to which the queues 
will direct output. 


How to Perform This Task 


1. Install any printers, plotters, and other output devices to which your users 
will have access. For information, see the documentation provided with the 
hardware. 


2. If you will use LAT printers, create logical LAT ports. You must create 
a logical LAT port on each service node to which a LAT printer is to be 
available, and associate the logical port with a physical port or service on the 
terminal server node. To do so, use the LATCP commands CREATE PORT 
and SET PORT. For more information, see Section 22.5.2. 


3. Set device characteristics for line printers and printers attached to terminal 
ports. To do so, use a series of SET commands. For more information, see 
Section 7.6.1. In step 6, you will create a command procedure to set up your 
devices each time the system reboots. The commands you enter to set device 
characteristics must be included in this command procedure. 


4. Spool printers. If you use LAT printers, or if you run applications that 
write output directly to a printer, you should spool your printers. For more 
information on spooled printers, see Section 13.6.7. 


To spool a printer, use the SET DEVICE/SPOOLED command, as explained 
in Section 7.6.2.1. 


5. Create a command procedure to set up your device characteristics and spool 
printers each time the system reboots. The commands you entered in steps 
3 and 4 must be included in the command procedure. (The commands you 
entered to set up logical ports in step 2 should be included in your site-specific 
LAT startup command procedure SYS$MANAGER:LAT$SYSTARTUP.COM.) 
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If your configuration is simple, you can add the commands to SYSTARTUP_ 
VMS.COM. If your configuration requires a large number of commands, 
create a separate command procedure (for example, DEVICE_SETUP.COM) 
and execute it from SYSTARTUP_VMS.COM. 


In the command procedure, a SET TERMINAL command must precede a SET 
DEVICE/SPOOLED command for the same output device. 


Example 

$ SET PRINTER/TAB/PAGE=66/WIDTH=132/LOWER/FF/NOCR - 

_$ /FALLBACK/NOWRAP/NOTAB LPAO: 

$ SET TERMINAL/SPEED=9600/PAGE=100/WIDTH=200/DEVICE=LN03/NOBROADCAST - 
_$ /NOECHO/HARDCOPY/NOTYPE AHEAD/NOFORM/NOWRAP/PASTHRU/PERMANENT LTA3331: 
$ SET DEVICE/SPOOLED=(LPA0,SYS$SYSDEVICE) LPAO: 

$ SET DEVICE/SPOOLED=(LN03_1,SYSS$SYSDEVICE) LTA3331: 


13.7.2 Creating and Starting Queues 


Create execution queues before you create generic queues. You can start a queue 
either at the time create the queue or later. For detailed instructions on creating 
and starting queues, see the following sections. 


Task For More Information 
Autostart execution queues Section 13.7.2.1 
Nonautostart execution queues Section 13.7.2.2 
Generic queues : Section 13.7.2.3 


13.7.2.1 Autostart Execution Queues 
To create an autostart execution queues, specify the /AUTOSTART_ON qualifier 
with the INITIALIZE/QUEUE command. 


For... Use This Command... 


Output queues INITIALIZE/QUEUVE[/BATCH]{/STARTVAUTOSTART_ 
ON=(node::[device:] [,...]) queue-name 
For node::, specify the name of the node on which the queue is to 
run. For device:, specify the name of the output device to which 
the queue’s output is sent. To allow the autostart queue to fail 
over to another node and device, specify a list of nodes and devices, 
separated by commas. The optional /START qualifier activates the 
queue for autostart. 


Batch queues INITIALIZE/QUEUE/BATCH[/STARTV/AUTOSTART_ON=(node:: 
[,..-]) queue-name 


The /BATCH qualifier creates a batch queue. For node::, specify 
the name of the node on which the queue is to run. To allow the 
autostart queue to fail over to another node, specify a list of nodes, 
separated by commas. The optional /START qualifier activates the 
queue for autostart. 


Caution 


The node name you specify as node:: is not checked to determine if it is 
an existing node name, so be sure to correctly specify the node name. 
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You can omit the /START qualifier, and activate the queue later using the START 
/QUEUE command. For more information, see the INITIALIZE/QUEUE and 
START/QUEUVE commands in the OpenVMS DCL Dictionary. 


Enabling Autostart to Start Autostart Queues 


You must enable autostart on a node to start autostart queues. Once you 
have created autostart execution queues, perform the following steps to enable 
autostart: 


1. For each node on which you want autostart queues to run (including those 
to which the queues can later fail over), enter the ENABLE AUTOSTART 
/QUEUES command. This command starts all stopped active autostart 
queues on a node and starts any active autostart queue that fails over to the 
node from another node in the VMScluster environment. 


2. Add the ENABLE AUTOSTART/QUEUES command to your startup command 
procedure on each node that is to run autostart queues to ensure that 
autostart is enabled each time the node reboots. 


Section 13.9.1.3 explains enabling autostart in detail. 


Example 

$ INITIALIZE/QUEUVE/START/DEFAULT=(NOBURST, FLAG=ALL, TRAILER=ONE) - 
_$ /AUTOSTART ON=(LILITH::LPAQ:,SMITTN::LPAQ:) LPAO 

$ INITIALIZE/QUEUE/START/DEVICE=TERMINAL/ - 

$ /AUTOSTART ON=(LILITH: :LTA3331:,SMITTN::LTA555:) - 

$ /RECORD_BLOCKING/BLOCK LIMIT=600/CHARACTERISTICS=(EAST) - 
$ /SEPARATE=(NOBURST, NOTRAILER,NOFLAG, RESET=ANSISRESET) - 
$ /DEFAULT=(NOFEED,NOBURST, FLAG=ONE, NOTRAILER, FORM=MEMO) - 
_$ /LIBRARY=LNO3LIBRARY /PROCESSOR=LATSYM LNO3 1 @ 

$ ENABLE AUTOSTART/QUEUES © 

$ ENABLE AUTOSTART/QUEUES/ON NODE=SMITIN @ 


This example does the following: 


@ Creates an autostart queue named LPAO and activates it for autostart. 
Because this is an autostart queue with a failover list, this queue can run on 
either LILITH::LPAO or SMITTN::LPAO. 


© Creates an autostart queue named LN03_1 for LAT printers. and activates 
it for autostart. Because this is an autostart queue with a failover list, this 
queue can run on either of the printers attached to LAT ports LTA833: on 
node LILITH or LTA555: on node SMITTN. 


© Enables autostart on the node on which the process is running. Assume this 
is node LILITH. Because both LPAO and LN03_1 are active autostart queues 
capable of running on node LILITH, these queues will start up on this node. 


© Enables autostart on node SMITTN. If LILITH becomes unavailable, both 
LPAO and LN03_1 can fail over to node SMITTN. 


13.7.2.2 Nonautostart Execution Queues 


13-16 


To create a nonautostart execution queue, specify the /ON qualifier with the 
INITIALIZE/QUEUE command. 
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Type of Queue Command 


Output queues INITIALIZE/QUEUE[/STARTV/ON=node::device queue-name 


For node::, specify the node on which the queue is to execute. 
For device:, specify the device to which the queue’s output is 
sent. The /START qualifier starts the queue. 


Batch queues INITIALIZE/QUEUE/BATCH[/START)VON=node:: queue-name 


The /BATCH qualifier is required to create a batch queue; 
node:: is the node on which the queue is to execute. The 
/START qualifier starts the queue. 


You can omit the /START qualifier, and start the queue later using the START 
/QUEUE command. For more information, see the INITIALIZE/QUEUE and 
START/QUEUE commands in the OpenVMS DCL Dictionary. 


Example 


$ INITIALIZE/QUEUE/BATCH/START/JOB_LIMIT=6/BASE PRIORITY=4 - 
_$ /ON=LILITH:: SYS$BATCH 

$ INITIALIZE/QUEUE/BATCH/START/JOB LIMIT=1/BASE PRIORITY=5 - 
_$ /NODISABLE_SWAPPING/AUTOSTART ON=LILITH:: FAST BATCH 


13.7.2.3 Generic Queues 
To create a generic queue, enter a command in the following format: 


INITIALIZE/QUEUVE[/START]/GENERIC=(execution-queue-list) generic-queue-name 
For example: 
$ INITIALIZE/QUEUE/START/GENERIC=(LPA0,LPBO,LPC0) LINE PRINT 


The /GENERIC qualifier specifies that the queue is a generic queue, and explicitly 
names a list of execution queues to which the generic queue sends jobs. 


The /START qualifier starts the queue. You can omit the /START qualifier, and 
start the queue later using the START/QUEUE command. 


You can also set up a generic queue without explicitly naming the execution 
queues to which it may send jobs. Instead, you enable certain execution queues to 
receive jobs from generic queues by specifying the /ENABLE_GENERIC qualifier 
with the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command for the 
execution queue. This method is not normally recommended. However, if your 
queue configuration is simple, you can use this method. For more information, 
see the INITIALIZE/QUEUE, START/QUEUE, and SET QUEUE commands in 
the OpenVMS DCL Dictionary. 


Example 


$ INITIALIZE/QUEUE/START - 
_$ /GENERIC=(LN03_1,LN03_2,LN03_3,LN03 4) LNO3 PRINT 
§$ INITIALIZE/QUEUE/START/GENERIC=(LPA0:,LPBO0:,LPCO:) SYSSPRINT 


13.7.3 Creating a Command Procedure to Restart Execution Queues on 
Reboot 


Information about forms and characteristics and queues is stored in the 
queue database. For this reason, you do not need to create forms queues and 
characteristics each time the node or VMScluster reboots. However, you must 
start nonautostart execution queues and enable autostart each time a node 
reboots. To do so, create a command procedure. 
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If your configuration is simple, you can add the commands to the site-specific 
startup command procedure SYSTARTUP_VMS.COM. If your configuration 
requires a large number of commands, create a separate command procedure and 
execute it from SYSTARTUP_VMS.COM. 


Generic queues are not automatically stopped when a node is shut down. 
Therefore, you do not need to include commands to start generic queues in your 
startup command procedure. 


Starting Nonautostart Queues 


For each queue that is not an autostart queue, you must include a START 
/QUEUE command naming the queue in your startup command procedure. 


Enabling Autostart 


You can start all stopped active autostart queues on a node by enabling autostart 
for queues with the single command ENABLE AUTOSTART/QUEUES. You do 
not need to include a separate START/QUEUE command in order to start an 
active autostart queue. For details on enabling autostart, see Section 13.9.1.3. 


When a node reboots, autostart is disabled until you enter the ENABLE 
AUTOSTART/QUEUES command. Add the ENABLE AUTOSTART/QUEUES 
command to your startup command procedure following the commands that 
configure printer devices and mount important disks. Digital recommends you 
add the ENABLE AUTOSTART/QUEUES command to your startup procedure on 
all of your nodes. This eliminates the need for you to add the command later, if 
you need to add autostart queues or add nodes to autostart queue failover lists. 


Example 
The following example illustrates some sample commands that might be added to 
a node’s SYSTARTUP_VMS.COM procedure. 


$! Start the nonautostart batch queue 
$ START/QUEUE SYSSBATCH 

$! Start all autostart queues 

$ ENABLE AUTOSTART/QUEUES 


For more examples, see the SYS$MANAGER:SYSTARTUP_VMS.COM template 
on your system disk. 


13.8 Using Queue Options 
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You can use certain options with your queues. For more information, see the 
following sections. 


Options Type of queue Section 
Controlling access to queues Batch and output Section 13.8.1 
Job retention Batch and output Section 13.8.2 
Characteristics Batch and output Section 13.8.3 
Controlling batch processing Batch Section 13.8.5 
Controlling job scheduling Output Section 13.8.6 
Banner pages Output Section 13.8.7 
Forms Output Section 13.8.9 
Controlling line and page overflow Output Section 13.8.11 


Options 


Device control library modules 
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Type of queue Section 


Output Section 13.8.12 


Most options can be implemented by specifying appropriate qualifiers with the 
INITIALIZE/QUEUE command when you create the queue. (You can also specify 
options after you create a queue by including qualifiers with the START/QUEUE 
or SET QUEUE command.) Table 13-1 lists the qualifiers you use to specify 
options for batch queues, and indicates the type of queue for which you can 
specify the option. See the OpenVMS DCL Dictionary for more details about 


these qualifiers. 


Table 13-1 Qualifiers for Specifying Queue Options 


Qualifier 


/AUTOSTART_ON 


/BASE_PRIORITY 


/BLOCK_LIMIT 


/CHARACTERISTICS 


/CPUDEFAULT 


/CPUMAXIMUM 


/DEFAULT 


Type of 
Queue 


Batch 
and 
output 


Batch 
and 
output 


Output 


Batch 
and 
output 


Batch 


Batch 


Output 


Description 


Creates an autostart execution queue and 
specifies the node or nodes (and for output 
queues, the device or devices) on which the 
queues can run. For more information, see 
Section 13.7.2.2. 


Specifies a base process priority (not the 
same as the job scheduling priority). For a 
batch queue, specifies the base priority for 
processes executing jobs in the queue. For 
output queues, specifies the base priority of 
the symbiont process. For more information, 
see Section 13.8.5.1 and the OpenVMS DCL 
Dictionary. 


Limits the size of print jobs that can be 
processed on an output execution queue. For 
more information, see Section 13.8.6. 


Specifies one or more characteristics associated 
with the queue. For more information, see 
Section 13.8.3. 


Defines the base value for the default CPU 
time limit for batch jobs executed in the queue. 
For more information, see Section 13.8.5 and 
the OpenVMS DCL Dictionary. 


Defines a maximum CPU time limit for 
batch jobs executed in the queue. For more 
information, see Section 13.8.5 and the 
OpenVMS DCL Dictionary. 


Establishes defaults for certain options of the 
PRINT command. After you set an option for 
the queue with the /DEFAULT qualifier, users 
do not have to specify that option in their 
PRINT commands. However, they can specify 
options to override the defaults set on the 
queues. Possible default options are as follows: 


BURST—Controls whether file flag pages 
with a burst bar between them are printed 
preceding output. For more information, see 
Section 13.8.7. 


(continued on next page) 
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Table 13-1 (Cont.) Qualifiers for Specifying Queue Options 


Type of 
Qualifier Queue Description 


FEED—Specifies whether a form feed is 
inserted automatically at the end of a page. 
For more information, see Section 13.8.11. 


FLAG—Controls whether a file flag page 
is printed preceding output. For more 
information, see Section 13.8.7. 


FORM—Specifies the default form for an 
output execution queue. If a job is submitted 
without an explicit form definition, this form is 
used to process the job. For more information, 
see Section 13.8.9. 


TRAILER—Controls whether a file trailer 
page is printed following output. For more 
information, see Section 13.8.7. 


/DESCRIPTION Batch Specifies a text string to provide users 
and with information about the queue. For 
output more information, see the OpenVMS DCL 
Dictionary. 
/DEVICE Output Specifies the type of output execution queue. 
The keywords are as follows: 
PRINTER (default)—Specifies a printer queue. 
This is the default. 
TERMINAL—Specifies a terminal queue. 
SERVER—Specifies a server queue. 
For more information, see Section 13.3.2 and 
the OpenVMS DCL Dictionary. 


/DISABLE_SWAPPING Batch Specifies whether batch jobs executed from a 
queue can be swapped in and out of memory. 
For more information, see Section 13.8.5. 


/FORM_MOUNTED Output Specifies the mounted form for an output 
execution queue. For more information, see 
Section 13.8.9. 


/GENERIC Batch Creates a generic queue and names the 
and execution queues it feeds. For more 
output information, see Section 13.7.2.3. 
/JOB_LIMIT Batch Indicates the number of batch jobs that can be 


executed concurrently from a batch queue. For 
more information, see Section 13.8.5. 


/LIBRARY Output Specifies the file name for a device 
control library. For more information, see 
Section 13.8.12. 


t/NAME_OF_MANAGER Batch On VAX systems, specifies the name of the 
and queue manager with which the queue will 
output be associated. For more information, see 


Section 12.8. 


TVAX specific 


(continued on next page) 
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Table 13-1 (Cont.) Qualifiers for Specifying Queue Options 


Qualifier 
/ON 


/OWNER_UIC 


/PROCESSOR 


/PROTECTION 


/RECORD_BLOCKING 


/RETAIN 


/SCHEDULE 


/SEPARATE 


Type of 
Queue 


Batch 
and 
output 


Batch 
and 
output 


Output 


Batch 
and 
output 


Output 


Batch 
and 
output 


Output 


Output 


Description 


Creates a nonautostart execution queue and 
specifies the node (and, for output queues, the 
device) on which the queue is to run. For more 
information, see Section 13.7.2.2. 


Specifies the user identification code (UIC) 
for the queue. For more information, see 
Section 13.8.1. 


Specifies the symbiont to be used with 

an output execution queue. The default 
is the standard operating system print 
symbiont PRTSMB. For more information, 
see Section 13.3.2 and the OpenVMS DCL 
Dictionary. 


Specifies a protection for the queue. For more 
information, see Section 13.8.1. 


Determines whether the symbiont can 
concatenate (or block together) output records 
for transmission to the output device. For 
more information, see the OpenVMS DCL 
Dictionary. 


Holds jobs in the queue after they have 
executed. For more information, see 
Section 13.8.2. : 


Specifies whether pending jobs in a queue are 
scheduled based on the size of the job. For 
more information, see Section 13.8.6. 


Specifies required job separation or job 

reset options for an output execution queue. 
Required options cannot be overridden by the 
PRINT command. Possible options are as 
follows: 


BURST—Controls whether two job flag pages 
with a burst bar between them are printed 
at the beginning of each job. For more 
information, see Section 13.8.7. 


¥FLAG—Controls whether a job flag page is 
printed at the beginning of each job. For more 
information, see Section 13.8.7. 


RESET—Specifies one or more device control 
library modules you want to use to reset 
the device after any file trailer and before 
any job trailer. For more information, see 
Section 13.8.12. 


TRAILER—Controls whether a job trailer page 
is printed at the end of each job. For more 
information, see Section 13.8.7. 


(continued on next page) 
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Table 13-1 (Cont.) Qualifiers for Specifying Queue Options 


Type of 
Qualifier Queue Description 
/WSDEFAULT Batch For batch queues, specifies a default working 
and set size for batch jobs executed in the queue. 
output For output queues, specifies a default working 
set size for the symbiont process. 
The value set by this qualifier overrides 
the value defined in the UAF of any user 
submitting a job to the queue. For more 
information, see Section 13.8.5. 
/WSEXTENT Batch For batch queues, specifies the working set 
and extent for batch jobs executed in the queue. 
output For output queues, specifies a working set 
extent for the symbiont process. 
The value set by this qualifier overrides 
the value defined in the UAF of any user 
submitting a job to the queue. For more 
information, see Section 13.8.5. 
/WSQUOTA Batch For batch queues, specifies the working set 
and quota for batch jobs executed in the queue. 
output For output queues, specifies a working set 


quota for the symbiont process. 


The value set by this qualifier overrides 

the value defined in the UAF of any user 
submitting a job to the queue. For more 
information, see Section 13.8.5. 


13.8.1 Controlling Access to Queues 


As with a file or directory, you can use UIC-based or ACL-based protection to 
control access to a queue. See the Security Guide for detailed information about 
establishing system security. 


13.8.1.1 Understanding UIC-Based Queue Protection 


<i> 
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UIC-based protection restricts the jobs and the users who have access to a queue. 
Operations that apply to queues are controlled by UIC-based protection in the 
same way that access to other protected objects (such as files) is controlled. 


UIC-BASED Protection (VAX Only) 


On VAX systems, when you create a queue, the queue is assigned an owner 
UIC and a protection code. The default owner is [SYSTEM], but you can specify 
another owner with the /OWNER_UIC qualifier. On VAX systems, the default 
UIC-based protection for a queue is as follows: 


(System:M,Owner:D,Group:R,World:S) 


Jobs are assigned an owner UIC equal to the UIC of the process that submitted 
the job, unless the job was submitted with the /USER qualifier. Each job in a 
queue, and each operation that is performed on a queue, is checked against the 
UIC of the owner, the protection of the queue, and the privileges of the requester. 


All operations are checked as follows: 


AXP 


Operation Type 
. Operations that apply to jobs 


Operations that apply to queues 


Check 
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Checked against the read and delete protection 


specified for the queue and the owner UIC of the 
job. In general, read access to a job allows a user to 
see the information about a job, and delete access 
allows the user to modify and delete the job. 


Checked against the submit and manage protection 


specified for the queue and the owner UIC of the 
queue. Submit access to a queue allows a user to 
submit jobs to that queue. Read access allows a user 
to see security information about a queue. Manage 
access allows a user to act as the operator for that 
queue, with the ability to affect any jobs in the queue. 
Users with operator (OPER) privilege have manage 
access to all queues. OPER privilege also enables 
users to create queues and modify security aspects of 


queues. 


The following table lists each type of access available on VAX systems, and 
explains what functions the access controls when applied to a queue. It also 
explains the default value provided on a queue for the access type. 


Access Function Default 
Submit Submit jobs to the queue World:Submit—lets all users submit jobs to 
the queue. 
Delete Modify and delete jobs in a Owner:Delete—lets users modify and delete 
queue their own jobs. 
Read Display attributes of jobs ina Group:Read—lets users see the attributes 
queue of the jobs of all users in their UIC group. 
Also lets users in the queue’s UIC group see 
security information. 
Manage Modify any non-security System:Manage—lets users with a system 


attribute of a queue and 


UIC act as operators for the queue. 


delete the queue, plus submit 
and read access to the queue 
and read and delete access to 
all jobs in the queue 


For more information on UIC_based protection, see the OpenVMS VAX Guide to 
System Security. ¢ 


UIC-Based Protection (AXP Only) 


On AXP systems, when you create a queue, the queue is assigned an owner 
UIC and a protection code. The default owner is [SYSTEM], but you can specify 
another owner with the /OWNER_UIC qualifier. On AXP systems, the default 
UIC-based protection for a queue is as follows: 


(System:E,Owner:D,Group:R,World:W) 


Jobs are assigned an owner UIC equal to the UIC of the process that submitted 
the job, unless the job was submitted with the /USER qualifier. Each job in a 
queue, and each operation that is performed on a queue, is checked against the 
UIC of the owner, the protection of the queue, and the privileges of the requester. 
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All operations are checked as follows: 


Operation Type 


Operations that apply to jobs 


Operations that apply to queues 


Check 


Checked against the read and delete protection 


specified for the queue and the owner UIC of the 
job. In general, read access to a job allows a user to 
see the information about a job, and delete access 
allows the user to modify and delete the job. 


Checked against the write and execute protection 


specified for the queue and the owner UIC of the 
queue. A user with write access to a queue can submit 
jobs to that queue. Users with execute access to a 
queue can act as the operator for that queue, with 
the ability to affect any jobs in the queue. Users with 
operator (OPER) privilege have execute access to all 
queues. OPER privilege also enables users to create 


queues. 


The following table lists each type of access available on AXP systems, and 
explains what functions the access controls when applied to a queue. It also 
explains the default value provided on a queue for the access type. 


Access 


Write 


Delete 


Read 


Execute 


Function 


Submit jobs to the queue 


Modify and delete jobs in a 
queue 


Display attributes of jobs in a 
queue 


Modify any non-security 
attribute of a queue and delete 
the queue, plus write access to 
the queue and delete and read 
access to all jobs in the queue 


Default 


World:Write—lets all users submit 
jobs to the queue. 


Owner:Delete—lets users modify 
and delete their own jobs. 


Group:Read—lets users see the 
attributes of the jobs of all users in 
their UIC group. 


System:Execute—lets users with a 
system UIC act as operators for the 
queue. 


For more information on UIC_based protection, see the OpenVMS AXP Guide to 
System Security. ¢ 


13.8.1.2 Setting and Showing UIC-Based Queue Protection 


Use the following commands to set and show UIC-based protection on queues. 
For more information on these commands, see the OpenVMS DCL Dictionary. 


Command 


INITIALIZE/QUEUE/PROTECTION=(ownership[:access].,...) 
START/QUEUE/PROTECTION=(ownership[:access),...) 


Description 


SET QUEUE/PROTECTION=(ownership[:accessj,...) 


INITIALIZE/QUEUE/OWNER_UIC=uic 
START/QUEUE/OWNER_UIC=uic 


SET QUEUE/OWNER_UIC=uic 
SHOW QUEUE/FULL 
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Changes the default UIC protection code on 
a queue. 


Changes the owner UIC of a queue. 


Shows the protection currently set for a 


queue. 
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Command Description 

+SET SECURITY/CLASS=QUEUE/OWNER=Euic On VAX systems, changes the UIC 
protection code on a queue. 

tSET SECURITY/CLASS=QUEUE On VAX systems, changes the default UIC 

/PROTECTION=ownership=access protection code on a queue. 

tSHOW SECURITY/CLASS=QUEUE On VAX systems, shows protection 


currently set for a queue. 


VAX specific 


Examples 


1. The following example sets UIC-based protection on a queue, and then 
displays information, including security information, about the queue. 


> CC‘ CNOtte 


On VAX systems, the following display would show S (SUBMIT) access 
instead of W (WRITE) access and M (MANAGE) access instead of E 
(EXECUTE) access. ¢ 


$ INITIALIZE/QUEUE/GENERIC=(SYS _QUE1,SYS QUE2)/PROTECTION=(S:E,0:D,G:R,W:W) - 
_$ /OWNER_UIC=[1,4]/RETAIN=ERROR SYS PRINT 

$ SHOW QUEUE/FULL SYS PRINT 

Generic printer queue SYS PRINT/GENERIC=(SYS QUE1,SYS | QUE2) - 

_$ /OWNER=[1, 4]/PROTECTION=(S:E,0:D,G:R,W: W) 7RETAIN= ERROR ) 


i> 2. On VAX systems, the following example gives owner manage and delete 
access to this queue and makes user AGBELL the owner. With manage 
acccess, the owner AGBELL can manage the queue, but cannot modify 
security information. 


$ SET SECURITY/CLASS=QUEUE/OWNER=[AGBELL]/PROTECTION=OWNER=MD - 
_$ TELEPHONE QUE 
$ SHOW SECURITY/CLASS=QUEUE TELEPHONE QUEUE 
TELEPHONE QUEUE object of class QUEUE 
Owner: [INVENTORS , AGBELL } 
Protection: (System: M, Owner: MD, Group: R, World: S) 
Access Control List: <empty> ¢ 


13.8.1.3 Understanding ACL-Based Queue Protection 
In addition to UIC-based protection, you can associate access control lists (ACLs) 
with a queue. ACL-based protection provides a more refined level of protection 
in cases where certain members of a project group require access to a queue, 
excluding others of the same UIC group or of other groups. See the Security 
Guide for detailed information about establishing ACLs for protected objects. 


13.8.1.4 Setting and Showing ACL-Based Queue Protection 
Use the following commands to set and show ACL-based protection on queues: 


Command Description 

SET ACL/OBJECT_TYPE=QUEUE - Sets ACL protection on a queue. 
/ACL=(IDENTIFIER=(identifier, ACCESS=access-code){,...]) 

SHOW QUEUE/FULL Shows the ACLs set on a queue, if any. 
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Command 


*SET SECURITY/CLASS=QUEUE/ACL=(ID=uic, 


ACCESS<=access) 


TSHOW SECURITY/CLASS=QUEUE 


TVAX specific 


AXP 
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Description 


On VAX systems, sets ACL protection 
on a queue. 


On VAX systems, shows ACLs set on a 
queue, if any. 


For more information on these commands, see the OpenVMS DCL Dictionary. 
For more information on ACL-based security see the Security Guide. 


Examples 


1. 


The SET QUEUE/PROTECTION command in the following example modifies 
the default UIC-based protection of queue SYS_QUE1 to prevent access by 
nonprivileged users. The SET ACL command then restricts access to only 
those members of a project group who hold the ULTRA_LITE or MINUTES 
identifiers. Members with the MINUTES identifier have only read and 
submit access to the queue. The SHOW QUEUE/FULL command displays 
information, including security information, about the queue. 


Note 


On AXP systems, the following display would show WRITE access instead 
of SUBMIT and EXECUTE access instead of MANAGE. ¢ 


$ SET QUEUE/PROTECTION=(S,0,G,W) 
$ SET SECURITY/CLASS=QUEUE SYS QUE1 - 
_$/ACL=( (IDENTIFIER=ULTRA | LITE, ACCESS=READ+SUBMIT+MANAGE+DELETE), - 
a9 (IDENTIFIER=MINUTES, ACCESS=READ+SUBMIT)) SYS | QUE] 
$ SHOW QUEUE/FULL SYS QUE! 
Batch queue SYS QUE], ~ stopped 
/BASE | PRIORITY=4 /JOB_LIMIT=1 /OWNER=[1,4] /PROTECTION=(S,0,G,W) 
~ (IDENTIFIER= =ULTRA | LITE, ACCESS= =READ+SUBMIT+MANAGE+DELETE) 
( IDENTIFIER=MINUTES , ACCESS=READ+SUBMIT ) 


The following example shows how to use ACLs to restrict queue access to 
members of a particular project group: 


Note 


On VAX systems, the following display would show SUBMIT access 
instead of WRITE and MANAGE access instead of EXECUTE. ¢ 


$ SET QUEUE/PROTECTION=(S,0,G,W) 

$ SET ACL/OBJECT TYPE=QUEUE SYS QUE1 - 

$/ACL=((IDENTIFIER=ULTRA LITE, ACCESS=READ+WRITE+EXECUTE+DELETE), - 
~$ (IDENTIFIER=MINUTES, ACCESS=READ)) SYS QUE1 
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3. On VAX systems, the following example shows a queue that has only UIC- 
based protection, and then gives user AGBELL control access with an ACL. 
Control access allows user AGBELL to modify security information. 





$ SHOW SECURITY/CLASS=QUEUE TELEPHONE QUEUE 

TELEPHONE QUEUE object of class QUEUE 
Owner: [INVENTORS , AGBELL ] 
Protection: (System: M, Owner: MD, Group: R, World: S) 
Access Control List: <empty> 


$ SET SECURITY/CLASS=QUEUE/ACL=(ID=[AGBELL] , ACCESS=CONTROL) TELEPHONE QUEUE 
$ SHOW SECURITY/CLASS=QUEUE TELEPHONE QUEUE 


TELEPHONE QUEUE object of class QUEUE 
Owner: [INVENTORS ,AGBELL ] 
Protection: (System: M, Owner: MD, Group: R, World: S) 
Access Control List: 
(IDENTIFIER=[CLASS,AGBELL],ACCESS=CONTROL) ¢@ 


13.8.1.5 Understanding How Privileges Affect Queues 


Certain account privileges allow users to access a queue in spite of UIC-based 
and ACL-based protection. The following table lists these account privileges and 
the type of access they allow on a queue: 


Privilege Access 
OPER +On VAX systems, manage and control access to all queues. 

£On AXP systems, execute and control access to all queues. 
BYPASS +On VAX systems, manage and control access to all queues. 

+On AXP systems, execute and control access to all queues. 
READALL Read access to all jobs. 

+ On VAX systems, also read access to queue security information. 


SYSPRV The access specified for users with system UICs. 
GRPPRV The access specified for users with system or group UICs. 
VAX specific 

£AXP specific 


13.8.2 Understanding Job Retention Options 


Users can request that a job be retained in a queue after the job completes by 
specifying the /RETAIN qualifier when they submit a job with the PRINT or 
SUBMIT command. 


In addition, you might want to set a job retention policy on a queue to keep 
information about all jobs in the queue after the jobs complete. This might be 
helpful when an individual must track jobs submitted by other users. 


By default, no job retention policy is set on a queue. To specify a job retention 
policy for a queue, use the /RETAIN=option qualifier with the INITIALIZE 
/QUEUE, START/QUEUE, or SET QUEUE command. You can specify one of the 
following options: 
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Option Description 
ALL Holds all jobs in the queue regardless of the jobs’ completion statuses. 
ERROR Holds jobs in the queue if they complete unsuccessfully. 


The following command specifies that the queue retain all jobs that complete with 
a status other than success: 


$ SET QUEUE/RETAIN=ERROR BATCH _QUE 


For example, if an operator needs to be aware of all batch jobs that do not 
complete successfully on a certain queue, you could set the queue to retain jobs 
that complete with an error status. This would let the operator enter the SHOW 
QUEUE command to display a list of jobs that completed unsuccessfully. The 
SHOW QUEUE display includes the completion status of jobs retained in the 
queue. If a job completes unsuccessfully, this message can help determine why. 
The displays also include the date and time at which a retained job completed. 


If you set a job retention policy on a queue, the queue’s job retention option 
overrides the job’s retention option. 


Whether and where a job is retained is determined by the following: 
e The retention setting on the execution queue in which the job executes 


e The retention setting on the generic queue (if the job is submitted to a generic 
queue) 


e The completion status of the job 


e The retention requested by the user upon submitting the job (if retention was 
requested) 


If jobs are retained in queues, you should periodically delete jobs that no longer 
need to be retained. 


Users can specify timed job retention to retain a job only as long as they need it. 
For example: 


$ SUBMIT/RETAIN=UNTIL=19-OCT-1994:07:31:0.0 MYFILE.DAT 


This eliminates the need for you to delete retained jobs from queues. If your 
users make use of the /RETAIN qualifier, encourage them to use timed retention. 


For more information about job retention, see the INITIALIZE/QUEUE/RETAIN 
and SUBMIT/RETAIN commands in the OpenVMS DCL Dictionary. 


To remove a job retention option from a queue, specify the /NORETAIN qualifier 
with the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command. 


13.8.3 Understanding Queue Characteristics 


13-28 


You can define characteristics and assign them to queues to control the jobs that 
execute on certain queues. 


When users include the (CHARACTERISTIC qualifier with a PRINT or SUBMIT 
command, all the characteristics they specify must also be assigned to the queue 
that will execute the job. If a job is placed in a queue that does not have the 
characteristics required by that job, the job enters a pending state. The job 
remains pending in the queue until you correct the characteristic mismatch as 
explained in Section 13.10.2.2. Users do not need to specify all characteristics 

of a queue when they enter a PRINT or SUBMIT command, as long as the 
characteristics specified are a subset of those established for the queue. Similarly, 
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you can define print forms for output queues (including, for example, a specific 
paper stock and page format) and assign the forms to queues to control the jobs 
that execute on certain queues. For more information, see Section 13.8.9. 


Example 


Suppose a system manager manages 12 LNO3 printers, with three printers 

in each of the four corners of a building. A generic queue LNO3$PRINT feeds 
execution queues for each of the LNO3 printers. The system manager defines four 
characteristics: EAST, WEST, NORTH, and SOUTH. The EAST characteristic 

is assigned to the execution queues that feed printers in the eastern corner of a 
building. WEST is assigned to the execution queues feeding the printers in the 
western corner, and so on. When a user submits a print job to LNO3$PRINT and 
specifies the EAST characteristic, the job prints on the first idle LN03 paar in 
the eastern corner of the building. 


If the system had queues for printers on multiple floors, the system manager 
could further define a characteristic for each floor, for example, FIRST, SECOND, 
and THIRD. 


13.8.4 Specifying Queue Characteristics Options 


To assign characteristics to a queue, specify the /CHARACTERISTICS qualifier 
with the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command. 

You must create a characteristic with the DEFINE/CHARACTERISTIC command 
before assigning the characteristic to the queue. For more information on creating 
and managing characteristics, see Section 13.9.2. 


13.8.5 Specifying Batch-Processing Options 


You can use queue options to control batch job performance and the use of system 
resources by processes executing batch jobs. 


You use the following qualifiers with the INITIALIZE/QUEUE, START/QUEUE, 
or SET QUEUE command to set these queue options: 


Option Description 

/JOB_LIMIT=n Specifies the number of jobs that can execute 
simultaneously in the queue. 

/[NOJDISABLE_SWAPPING Specifies whether the processes running jobs on the 
queue can be swapped out of memory. 

/CPUDEFAULT=time Specifies the base value for the default CPU time 
limit. The time cannot exceed the time limit set by the 
/CPUMAXIMUM qualifier. 

/CPUMAXIMUM=stime Specifies the maximum CPU time limit. 


You can also use the following qualifiers. Although these qualifiers are not 
specific to batch queues, they are commonly used like the batch-specific options, 
to control batch job performance and the use of system resources by batch 


processes. 
Option Description 
/BASE_PRIORITY=n Specifies the base process priority at which jobs are 


initiated from a batch queue. 
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Option Description 


/WSDEFAULT=n Specifies the default working set size for jobs 
executed in a batch queue. (For output queues, 
specifies the default working set size for symbiont 
processes.) 


/WSEXTENT=n Specifies the working set extent for jobs executed 
in a batch queue. (For output queues, specifies the 
working set extent for symbiont processes.) 


/WSQUOTA=n Specifies the working set quota for jobs executed 
in a batch queue. (For output queues, specifies the 
working set quota for symbiont processes.) 


For more information about these limits, quotas, and priorities, see the following 
manuals: 


¢ The INITIALIZE/QUEUE command in the OpenVMS DCL Dictionary 
e On VAX systems, the Guide to OpenVMS Performance Management 


e On AXP systems, A Comparison of System Management on OpenVMS AXP 
and OpenVMS VAX 


By default, a process running a batch job uses values taken from the UAF record 
of the user submitting the job or from system parameter settings. For more 
information about the default values for these options, see the description of 
the qualifiers for the INITIALIZE/QUEUE command in the OpenVMS DCL 
Dictionary. If you specify values for any of these options, processes for jobs 
executed in the queue will use the values you set unless the user specifies values 
when the job is submitted. (A user can specify values for CPU time and for the 
working set options default, quota, and extent.) If a user specifies a value for one 
of these options when the job is submitted, this value cannot exceed the value 
you set for the queue. If you did not specify a value, the value specified by the 
user cannot exceed the value specified in the associated UAF limit or system 
parameter. | 


The following sections provide guidelines for choosing values for these options. 


Option For More Information 
Base process priority Section 13.8.5.1 
Job limit Section 13.8.5.2 
Working set default, quota, and extent Section 13.8.5.3 
CPU default and maximum Section 13.8.5.4 
Swapping Section 13.8.5.5 
Options for memory-constrained systems Section 13.8.5.6 
Optimizing for the Sort/Merge utility Section 13.8.5.7 


13.8.5.1 Base Process Priority 
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Choose a value based on how quickly you will allow batch jobs to progress. If you 
choose a value equal to the system parameter value DEFPRI (typically 4), jobs in 
this queue will progress at the same rate as typical interactive jobs. This choice 

might be appropriate for systems that have an abundance of available CPU time. 
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If, on the other hand, you choose a value less than DEFPRI, jobs in this queue 
will potentially progress more slowly than the typical interactive job. CPU time 
will be allocated to jobs in this queue only after servicing jobs of DEFPRI priority. 


In the case of a queue defined for a very special purpose—for example, high- 
priority jobs—a value greater than DEFPRI (for example, 5) might be appropriate. 
However, this choice can have a significant negative effect on the performance of 
other users and batch jobs. 


13.8.5.2 Job Limit 
Keep this value low when using a base process priority of DEFPRI or greater, 
since each batch job can affect the performance of interactive jobs. 


13.8.5.3 Working Set Default, Quota, and Extent 
If you do not specify values for these options, a job uses the value specified in its 
owner’s user authorization file (UAF) record. 


Process Limit Description 
Working set default The value to which the working set returns at the exit of each 


image. Typically, the value should be relatively small and 
is usually best left at the value specified in the user’s UAF 


record. 

Working set quota The value that approximates the amount of physical memory 
used by each batch job in the queue in a memory-constrained 
system. 

Working set extent The value that approximates the amount of physical memory 


in a memory-rich system. 


Typically, you should set this to a high value. The working set 
extent value is an upper limit for the size of the working set; 
the working set cannot be expanded beyond this value even 

if more memory is required by the job. If you set this value 
too low, a job might page fault heavily even if the system has 
plenty of memory available. To be safe, choose a working set 
extent value equal to the system parameter value of WSMAX, 
which specifies the maximum working set size possible for your 
system. 


In general, the working set quota and extent values specified in the UAF record 
for each user are sufficient. However, you might want to specify more generous 
or stringent values for a queue, depending on the purpose of the queue. For 
example, you might encourage users to submit large jobs (such as compiling and 
linking large programs) as batch jobs to reserve interactive tise of the system for 
jobs that do not require extensive resources, as follows: 


e Set a large working set size for batch jobs by specifying larger WSQUOTA 
and WSEXTENT values when you create the batch queue. 


¢ Restrict the working set size of interactive jobs by providing smaller 
WSQUOTA and WSEXTENT values in users’ UAF records. 
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13.8.5.4 CPU Default and Maximum 


You can restrict and expand the amount of time a job is allowed in the CPU by 
setting CPU limit values. 


Be careful to not set CPU time limit values too low. When a job’s CPU time limit 
is exceeded, the job is terminated with an error status. If working set values 
(explained in the previous section) are set too low, the system might use memory 
less efficiently but the jobs can still complete normally. However, if CPU time 
limit values are set too low, the system might terminate jobs that are making 
legitimate and authorized use of the CPU. 


For example, you might use a CPU time limit on a batch queue devoted to 
execution of newly coded software that could unexpectedly enter a CPU loop. The 
CPU time limit would terminate infinitely looping jobs so they do not waste the 
CPU resource. However, you must be careful to choose a sufficiently high time 
limit so normally executing jobs do not terminate prematurely. 


Another way to control allocation of the CPU resource is to create a special- 
purpose batch queue that shifts execution of its jobs to a less busy time of day 
when CPU time is more available. 


13.8.5.5 Swapping 


Typically, swapping is enabled on batch queues. However, for a very special- 
purpose, high-priority queue, you might disable swapping. This provides a 
favorable status to jobs in this queue by removing them from consideration 
when memory must be reclaimed from processes (through the operating system’s 
swapping and trimming mechanism). For more information, see the following 
manuals: — 


e On VAX systems, the Guide to OpenVMS Performance Management. 


¢ On AXP systems, A Comparison of System Management on OpenVMS AXP 
and OpenVMS VAX. 


13.8.5.6 Setting Up Batch Queues on Memory-Constrained Systems 


On memory-constrained systems, you should add up the pages required for the 
batch working sets on all batch queues and make sure that enough fluid memory 
remains for interactive jobs. Fluid memory can be reassigned from one process 
to another through swapping and paging. (You can calculate fluid memory as the 
space that remains when you subtract the number of pages permanently allocated 
to the operating system from the total memory. To obtain these values, enter the 
DCL command SHOW MEMORY.) 


13.8.5.7 Optimizing Batch Queues for the Sort/Merge Utility 
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You can improve the efficiency of the OpenVMS Sort/Merge utility (SORT 
/MERGE) by designating one batch queue for sorting jobs and giving this queue a 
very large working set quota. 


In addition, you can set process quotas for greatest SORT efficiency. The values 
recommended here are based solely on SORT considerations; you should integrate 
other system considerations with these to determine appropriate values. 


e Working set extent per process (WSEXTENT)—For maximum sorting 
efficiency, use the /(WSEXTENT qualifier with the INITIALIZE/QUEUE, 
START/QUEUE, or SET QUEUE command to set this value on the queue to 
the largest value any sorting job would ever need. Generally, the smaller the 
working set, the slower the sort. 
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For very large files, working sets of 4000 or more pages (on VAX systems) 
or pagelets (on AXP systems) are not unreasonable, provided the system has 
enough physical memory to support them. 


e Virtual page count per process (VIRTUALPAGECNT system parameter)—For 
maximum sorting efficiency, set this system parameter to at least 1000 pages 
(on VAX systems) or pagelets (on AXP systems) more than the maximum 
working set extent. Although SORT limits the size of the sort data structure 
to the process’s working set extent, if work files are required, SORT can use 
the extra memory for I/O buffers. If this parameter is too low relative to the 
working set extent, SORT might be unable to create buffers for the work files 
when the files cannot be sorted in memory. 


13.8.6 Specifying Job Scheduling Options 


For output queues, you can choose options that control how the size of a print job 
affects its scheduling. Specify the following qualifiers with the INITIALIZE 
/QUEUE, START/QUEUE, or SET QUEUE command to control print job 


scheduling: 

Option Description 

/SCHEDULE=[NO]JSIZE Lets you control whether pending jobs are 
scheduled for printing based on the size of 
the job. 

[NOJBLOCK_LIMIT=((lowlim, luplim) Lets you reserve certain printers for 


certain size jobs. 


For more information on job scheduling, see Section 13.9.6.4. 


/SCHEDULE 

By default, printer and terminal queues are created with the /SCHEDULE=SIZE 
qualifier, causing shorter jobs to print before long ones. However, you can specify 
the /SCHEDULE=NOSIZE qualifier, causing jobs to be printed in the order they 
were submitted, regardless of size. For more information, see the /SCHEDULE 
qualifier for the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command 
in the OpenVMS DCL Dictionary. 


/BLOCK_LIMIT 

By default, printer and terminal queues are created with no block limit, so jobs of 
any size will be printed. However, you can specify the /BLOCK_LIMIT qualifier 
to limit the size of jobs that can be printed. You can specify just an upper limit or 
both an upper and lower limit. 


For example, you could submit a batch job that runs a command procedure to 
set a maximum block limit of 500 blocks for a queue at 8:00 a.m. The command 
procedure might resubmit itself and remove the block limit after 5:00 p.m. each 
day. This would let users print jobs of any size after normal work hours, when 
the printing work load is lighter. Users can specify the /AFTER qualifier with the 
PRINT qualifier to specify that a job is to be printed after a certain time. 


For more information about restricting print job sizes, see the /BLOCK_LIMIT 
qualifier for the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command 
in the OpenVMS DCL Dictionary. 
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13.8.7 Understanding Banner Pages 


You should understand the following terms: 


Term Definition 
Banner pages Specially formatted pages that you can set up for queues, 


to help in identifying and separating output jobs when 
they exit a printer; also to help identifiy and separate files 
within jobs. 

Job pages Banner pages that identify and separate jobs; users cannot 
override job banner pages that you set for a queue. 


File pages Banner pages that identify and separate files within a job; 
users can override the file banner page settings you set for 
a queue by specifying the BURST, FLAG, and TRAILER 
qualifiers with the PRINT command. 


Most sites use only a subset of the available banner pages at any given time. The 
following table describes the types of banner pages you can use: 


For More 
Type Description Information 
Job Pages 
Flag page A single page printed before each job. Figure 13-10 
Burst page Two flag pages, divided by a separation (burst) Figure 13-10 
bar, printed before each job 
Trailer page A page printed after each job. Figure 13-12 
File Pages 
Flag page A single page printed before each file in a job. Figure 13-11 
Burst page Two flag pages, divided by a separation (burst) Figure 13-11 
bar, printed before each file in a job. 
Trailer page A page printed after each file in a job. Figure 13-13 


13.8.7.1 Flag and Burst Pages 
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Flag and burst pages both indicate that a print file follows. However, a burst 
page is two flag pages divided by a burst bar, which is designed to print over 
the crease between two pages of continuous-form paper. The burst bar is used for 
ease in separating continuous-form paper. If you do not need to burst pages of 

a printer’s output—for example, if your printer uses cut sheet paper—avoid the 
burst page option. Flag pages, or flag and trailer pages, are usually sufficient for 
identifying the end of a job. 


Figure 13-10 illustrates job flag and burst pages produced by the default print 
symbiont, PRTSMB. 


Figure 13-11 illustrates file flag and burst pages produced by PRTSMB. 
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Figure 13-10 Job Flag and Burst Pages 
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The job flag page indicates that a new job follows; the job can include one or more 
files. Information found on a job flag page includes the following: 


Item 


Header bar 


Note 


Identification banner 


Job sentence 


Footer bar 


Description 


A single-segment bar composed of the following elements: 


Rows of a repeated numeral indicating the sequence of the 
job in the printer queue. 


An embedded text string specified by defining the 
PSM$ANNOUNCE system logical name. The length of the 
string is limited to one form width. If PPM$ANNOUNCE 
is not defined, the default text string is “Digital Equipment 
Corporation” followed by the system version number. 
(“Digital Equipment Corporation” is abbreviated to “DEC” 
for shorter form widths.) 


Users can specify a string of up to 255 characters with the 
/NOTE qualifier of the DCL command PRINT. 


This includes user name of the process submitting the job, the 
job name, and the job number. 


Indicates the following information: 


Job name and number 

Name of queue to which job was submitted 
Submission date and time 

Process user name, UIC, and account 

Job scheduling priority 

Print device name 

Job start time 


Execution queue name 


Identical to the header bar except that the definition of the 
system logical name (PSM$ANNOUNCE) is not used as the 
embedded string. The default text is always used as the 
embedded string. 


Figure 13-11 illustrates a file flag and burst page. 


Managing Batch and Print Queues 
13.8 Using Queue Options 


Figure 13-11 File Flag and Burst Pages 
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Information found in the file flag page includes the following items: 


Item 


Header bar 


Note 


Identification banner for 
the process submitting 
the job 


File sentence 


Job sentence 


Footer bar 


13.8.7.2 Trailer Pages 


Description 
A three-segment bar composed of the following elements: 
¢ Acentral segment identical to the job header bar 


e Flanking segments with rows of a repeated character 
indicating the sequence of the file in the job 


Users can specify a string up to 255 characters in length using 
the /NOTE qualifier of the DCL command PRINT. 


Includes the user name and file name. 


Indicates the following information: 


¢ Full file specification, including device and directory, file 
name, type, version, and revision time and date 


e File size in blocks 
e File organization 
e File owner’s UIC 


e File record characteristics: record type, carriage control, 
and size of longest record 


Indicates the following information: 

¢ Job name and number 

¢ Name of queue to which job was submitted 

e Submission date and time 

e Process user name, UIC, and account 

e Job scheduling priority 

¢ Print device name 

e Job start time 

e Execution queue name 

Identical to header bar except that the embedded text string 


is “Digital Equipment Corporation” followed by the operating 
system version number. 


A trailer page indicates the end of a print job or print file. Figure 13-12 
illustrates a job trailer page. Figure 13-13 illustrates a file trailer page. 
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Figure 13-12 Job Trailer Page 
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Figure 13-13 File Trailer Page 
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The job trailer page indicates the end of a print job. Information found on the job 
trailer page includes the following: 


Item 


Header bar 


Identification banner 
Receipt box 


Job sentence 


Ruler 


Description 
A three-segment bar composed of the following elements: 
¢ Central segment with “END OF JOB” banner 


e Flanking segments with job-sequence numeral 


For the process submitting the job. Includes job name and job 
number. 


Contains the following signoff fields: Received:, Date:, and 
Operator:. 


Indicates the following information: 

e Job name and number 

e Name of queue to which job was submitted 
e Submission date and time 

e Process user name, UIC, and account 

e Job scheduling priority 

e Print device name 

e Job start time 


e Execution queue name 


A sequence of numbers counting to the end of the form. 


The file trailer page includes the following items: 


Item 


Header bar 


Identification banner 


Qualifier phrase 


Description 

A five-segment bar composed of the following elements: 
— Central segment with “END OF FILE” banner 

— Inner flanking segments with job-sequence numeral 


— Outer flanking segments with file-sequence character 


For the process submitting the job. Includes user name, 
file name. 


Indicates the print, queue, and form qualifiers active 
when the job was submitted; nonactive qualifiers (except 
/NORECORD_BLOCKING and /NOFEED) are not 
included. 
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item 


File sentence 


Description 


Indicates the following information: 


Job sentence 


Footer bar 
Ruler 


Full file specification, including device and directory, 
file name, type, version, and revision time and date 


File size in blocks 
File organization 
File owner’s UIC 


File record characteristics: record type, carriage 
control, and size of longest record 


Indicates the following information: 


Job name and number 

Name of queue to which job was submitted 
Submission date and time 

Process user name, UIC, and account 

Job scheduling priority 

Print device name 

Job start time 


Execution queue name 


Identical to file flag/file burst footer bar. 


A sequence of numbers counting to the end of the form. 


Widths greater than 40 characters and less than 200 characters and lengths of 
any size greater than 40 characters are supported for file and job banner pages. 
Pages requested for widths greater than 200 characters are formatted and printed 
at 200-character widths. Lengths less than 40 characters are extended by that 
form length until the 40-character threshold is exceeded. Margins are not taken 
into account when formatting banner pages. | 


Note 


All banner pages format information to the width and length of the 
default form size of 80 characters by 51 lines. Therefore, information 
might be truncated, depending on the form sizes you specify. See 
Section 13.8.11 for information about controlling line and page overflow. 


13.8.8 Specifying Banner Page Options 


You specify banner page options by including the following qualifiers with the 
INITIALIZE/QUEUVE, START/QUEUE, or SET QUEUE command: 
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Page Type Qualifier 


Job pages (to separate jobs) /SEPARATE=option 
Where option can be one or more of the following: 
[NO]JBURST 


[NO]JFLAG 
[NO]TRAILER 


File pages (to separate files /DEFAULT=option=keyword 
within jobs) Where option can be one or more of the following: 
[NOJBURST 


[NO]FLAG 
[NO]TRAILER 


Keyword can be either ALL or ONE. 


13.8.9 Understanding Forms 


Print forms serve the following functions: 


e Forms determine certain page formatting attributes (such as margins and 
page length). 


e The paper stock specified in the form definition is used in determining 
whether a job is eligible to print. 


If your printing needs are limited, you do not need to use special forms; Digital 
supplies a systemwide default form (named DEFAULT) for all queues. 


However, if you want to help users format output or if certain print jobs require 
special paper, you can create one or more forms. Users can then request a form 
for a print job by specifying the form when they submit a job. If a user does not 
specify a form, the job uses the queue’s default form. See Section 13.9.4.4 for 
information about specifying a default form for a queue. 


You can create forms to format output in the following ways: 


For More 
Formatting Information 
Control line overflow by truncating or wrapping lines. Section 13.8.11 
Control page width and length and margin size. Section 13.9.4.1 


Pause output at the end of each page so a new sheet of paper can be_ Section 13.9.4.1 
inserted (use this for printers that require sheet-feed paper). 


Specify that a certain paper stock must be physically loaded in the Section 13.9.4.1 
printer. 


Specify device control library modules to set up the device at the Section 13.9.5.3 
start of each page or each file, or both. 


The stock of a form is particularly important because it affects whether a job 
is eligible to print. The stock of a job’s form must match the stock of the form 
currently being used by the queue (the queue’s mounted form), or the job will 
not be scheduled to print; instead, it remains pending in the queue until you 
perform special steps. (These steps are described in Section 13.10.2.1.) 
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A queue’s mounted form is the form of the current job or, if no job is processing, 
the form of the last job printed in a queue. As long as the stock of a job’s form 
matches the stock of the queue’s mounted form, the job is processed using the 
options in the job’s form, and the mounted form changes automatically to the 
form of the job being processed in the queue. 


13.8.10 Specifying Forms Options 


To use forms with your queues, take the following steps: 


1. Create a form using the DEFINE/FORM command as explained in 
Section 13.9.4.1. 


2. If you want to change the DEFAULT form, do so before creating any 
queues that reference the DEFAULT form. For more information, see 
Section 13.9.4.3. 


3. Assign a default form for each output execution queue. To assign a 
default form, specify the /DEFAULT=FORM=form-name qualifier with 
the INITIALIZE/QUEUVE, START/QUEUE, or SET QUEUE command. For 
more information, see Section 13.9.4.4. 


If you do not assign a default form to a queue, the queue uses the systemwide 
default form, DEFAULT. 


4. Inform users of the available forms and the queues with which they should be 
used. 


For information on creating and managing forms, see Section 13.9.4. 


13.8.11 Specifying Options for Controlling Page and Line Overflow 


Under certain conditions, lines and pages formatted by the print symbiont might 
exceed the length of lines and pages for a printer. You can use queue options to 
control line and page overflow. 


13.8.11.1 Controlling Line Overflow with Forms 
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Digital recommends that you control line overflow by using form definitions. To 
do this, you must set terminals and printers to avoid wrapping or truncating the 
print line before the physical limit of the device’s width. 


Note 


The print symbiont uses the form to determine the width of a line. Once 
the print symbiont has finished formatting the data, if the width of the 
line exceeds the /WIDTH setting for the device, the device driver will use 
the /TRUNCATE or /WRAP settings (if set) to truncate or wrap the line. 


Different forms can have different right, left, top, and bottom margin settings. 
By using forms to control page and line overflow, users can switch from one form 
to another without requiring operators to stop the queue, alter the device setup, 
and restart the queue. The queue manager automatically mounts any forms with 
the same stock as the currently mounted form. Operator assistance is needed 
only to mount a form that has a stock that differs from the stock of the currently 
mounted form. For more information, see Section 13.10.2.1. 
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To control line overflow, create forms using the DCL command DEFINE/FORM 
and specify the following qualifiers: 


Qualifier Function 


AINOJTRUNCATE Specifies that data in the right margin be discarded. The default 
is /TRUNCATE. If you specify /TRUNCATE, you cannot specify 
/WRAP; the /TRUNCATE qualifier forces /N OWRAP. 


/[INOJWRAP Specifies that a carriage return and line feed be inserted when the 
right margin is exceeded. The default is /NOWRAP. If you specify 
/WRAP, you cannot specify /TRUNCATE. 


For more information on creating and managing forms, see Section 13.8.9. 


13.8.11.2 Controlling Page Overflow with the Form-Feed Character 
To control page overflow errors, specify the /DEFAULT=[NO]FEED option with 
the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command. This 
option controls whether a form-feed character is automatically inserted when 
the symbiont detects overflow into the bottom margin area. Users can use the 
PRINT/FEED or PRINT/NOFEED command to override the default feed option 
specified for a queue. 


Users can specify the /PASSALL qualifier with the PRINT command to bypass 
all formatting performed by the print symbiont. The default is /NOPASSALL. 
This qualifier should be used in cases where the print symbiont formatting might 
interfere with the desired formatting of the file. The /PASSALL qualifier causes 
the print symbiont to send I/O to the device driver with all formatting suppressed 
and to behave as follows: 


e Not interpret Fortran or print carriage control characters 
e¢ Not perform line or page overflow error handling 


e Not interpret escape sequences 


13.8.12 Understanding Device Control Libraries 


A device control library is a text library that contains user-written modules 
consisting of text or escape sequences. Device control library modules can be used 
for the following purposes: 


¢ With programmable printers, to insert device-dependent escape sequences 
that set up a printer for selected print options such as point size, character 
set, and bold or italic print 


¢ With both programmable and nonprogrammable printers, to insert text at 
specific points in the processing of a print job 


There are three types of device control modules, distinguished by their placement 
in a print job: 


Module Type Placement 

SETUP modules Inserted at the beginning of a file. 

PAGE_SETUP modules Inserted at the beginning of each page. 

RESET modules Inserted at the end of each job. Use reset modules to reset a 


printer to a known state at the end of a job. 
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13.8.13 Specifying Device Control Library Options 


To specify a setup or page setup module for a queue, use forms. Create one or 
more forms with the DEFINE/FORM command, and specify the /SETUP=module 
or /PAGE_SETUP=module qualifier to specify the module to be used. When the 
form is used with a print job, the module will automatically be sent to the printer. 


To specify a reset module, use the /SEPARATE=RESET=module qualifier with the 
INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command. The module 
will be automatically sent to the printer at the end of every job. 


To use device control library options, perform the following steps: 
1. Create a library and insert modules. 


2. Assign the device control library to a queue. (This step is not necessary if you 
use the default library name SYSDEVCTL.TLB.) 


3. Create one or more forms with setup or page setup modules. 
4. Assign reset modules to a queue. 


For more information on creating and managing device control libraries, see 
Section 13.9.5. 


13.8.14 Understanding the Order of Device Control Module Output 
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The following list shows the order in which device control modules are sent to the 
printer within a print job: 


1. Reset modules assigned to the queue. (Reset modules are only used at this 
point for the first job printed after a queue is started.) 


Setup modules specified in the form definition. 
Page setup modules specified in the form definition. 
Setup modules specified with the PRINT command 
Page 1 of file 1. 

Page setup modules specified in the form definition. 
Page 2 of file 1, and so forth. 


Page setup modules specified in the form definition. 


GN Oe ae ee 


Last page of file 1. 


— 
a) 


. Setup modules specified in the form definition. 


_ 
~ 


. Page setup modules specified in the form definition. 
. Setup modules specified with the PRINT command. 
. Page 1 of file 2. 


a ee 
e~ Cw; bh 


. Page setup modules specified in the form definition. 
. Page 2 of file 2, and so forth. 


. Page setup modules specified in the form definition. 


—~ ee 
aI on o 


. Last page of file 2. 


_ 
oO 


. Reset modules assigned to the queue. 
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13.9 Maintaining the Queues 


Once you have set up your queues, you will need to monitor and modify it 
according to the needs of your site. Setting up queues is not restricted to startup 
time. During normal operation, you can enter the commands to create and start 
queues as needs dictate. 


For example, you might need to perform the following types of maintenance on 
your queues: 


Maintenance Task Section 

Managing queues Section 13.9.1 
Managing characteristics Section 13.9.2 
Managing forms Section 13.9.4 
Managing device control libraries Section 13.9.5 
Managing jobs in queues Section 13.9.6 
Solving queue problems Section 13.10 


13.9.1 Managing Queues 


Once you set up queues, you must monitor, control, and, if necessary, change 
them. The following sections introduce the basic DCL commands used to perform 
routine queue management operations. 


The following tables list the basic commands for creating and controlling queues. 
Table 13-2 lists commands that have the same effect on all queues. Table 13-3 
lists commands that have a different effect on autostart and nonautostart 
queues. 


Table 13-2 Effects of Queue Commands on All Queues 


Command Description 

ASSIGN/MERGE Moves jobs from one queue to another. 
ASSIGN/QUEUE Redirects jobs in a logical queue to an execution queue. 
DELETE/QUEUE Deletes a queue. 

SET QUEUE Modifies a queue. 

SHOW QUEUE Displays information about a queue. 

STOP/QUEUE Pauses a queue. 

STOP/QUEUES/ON_NODE Aborts current jobs and stops all queues on a node 


without stopping the queue manager. 
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Table 13-3 Effects of Queue Commands on Autostart and Nonautostart Queues 


Command 


DISABLE AUTOSTART/QUEUES 


ENABLE AUTOSTART/QUEUES 


INITIALIZE/QUEUE 


INITIALIZE/QUEUE/START 


START/QUEUE 


STOP/QUEUE/NEXT 


STOP/QUEUE/RESET 


Effect on Autostart Queues 


After allowing jobs to complete, 


fails over all autostart queues to 


the next available node in each 


queue’s node list. If a queue has 


no list specified, the queue is 
stopped. 


Starts all stopped, active 
autostart queues capable of 
running on the node. 


Creates the queue. The 
/AUTOSTART_ON qualifier 
specifies one or more nodes or 
nodes and devices on which the 
queue can run. 


Creates the queue and 
activates it for autostart. The 
/AUTOSTART_ON qualifier 
specifies one or more nodes or 
nodes and devices on which the 
queue can run. 


Activates the queue for 
autostart. 


Stops a queue after allowing 
the current jobs to complete, 
and deactivates the queue for 
autostart. 


Stops a queue abruptly and 
deactivates the queue for 
autostart. 


Effect on Nonautostart 
Queues 


No effect. 


No effect. 


Creates the queue. The /ON 
qualifier specifies a single 
node or node and device on 
which the queue is to run. 


Creates and starts the 
queue. The /ON qualifier 
specifies a single node or 
node and device on which the 
queue is to run. 


Starts the queue. 


Stops a queue after allowing 
the current jobs to complete. 


Stops a queue abruptly. 


The following sections describe tasks for managing queues. 


Task 


Initializing Queues 


Starting Nonautostart Queues 
Enabling Autostart on a Node to Start Autostart Queues 
Activating an Autostart Queue 


Monitoring Queue Information 


Modifying a Queue 
Pausing a Queue 
Closing a Queue 


Stopping a Queue 


Preventing Autostart Queues from Starting 
Disabling Autostart on a Node 
Stopping All Queues on a Node 


Stopping Queues Before Shutting Down a System 
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Section 13.9.1.1 
Section 13.9.1.2 
Section 13.9.1.3 
Section 13.9.1.4 
Section 18.9.1.5 
Section 13.9.1.6 
Section 13.9.1.7 
Section 13.9.1.8 
Section 13.9.1.9 
Section 13.9.1.10 
Section 13.9.1.11 
Section 13.9.1.12 
Section 13.9.1.13 
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Task For More Information 
Assigning a Logical Queue Section 13.9.1.14 
Moving All Jobs from One Queue to Another Section 13.9.1.15 
Deleting a Queue Section 13.9.1.16 


13.9.1.1 Initializing Queues 
Typically, you create your queues when you first set up your system. However, 
you might want to create queues later as the need arises. 


Use the INITIALIZE/QUEUE command to create a queue, as explained in 
Section 13.7.2. 


If you create additional output queues at a later time, make sure you add 
commands to set device characteristics to the startup command procedure on 
the node on which the device is located. For devices attached to a LAT port, add 
commands to the startup procedures on all nodes with queues for the device. 


If you create any additional nonautostart queues at a later time, you must also 

add appropriate START/QUEUE commands to the startup command procedure 

on the node on which the queue will run. If you do not add appropriate START 

/QUEUE commands, the queues will not be started when the system reboots. 
13.9.1.2 Starting Nonautostart Queues 


To start a queue that is not an autostart queue, use the START/QUEUE comman 
as follows: 


START/QUEUE[/qualifier,...] queue-name — 


Queue-name is the name of the queue you want to start. For information about 
the qualifiers you can specify, see the OpenVMS DCL Dictionary. 


13.9.1.3 Enabling Autostart on a Node to Start Autostart Queues 
You must enable the autostart feature on a node to start autostart queues. 


Enabling autostart on a node notifies the queue manager to automatically do the 
following: 


e Start all active and valid autostart queues on the node 

e Start any active autostart queue that fails over to the node 
To enable autostart on a node, enter the following command: 

$ ENABLE AUTOSTART/QUEUES 


By default, the command affects the node from which it is entered. However, you 
can specify the /ON_NODE qualifier to enable autostart on a different node. For 
more information, see the OpenVMS DCL Dictionary description of the ENABLE 
AUTOSTART/QUEUES command. 


Note 


The ENABLE AUTOSTART/QUEUES command starts only valid, active 
autostart queues capable of running on a node. If an autostart queue does 
not start when you enter this command, the queue might not be active for 
autostart. You must initially activate autostart queues, as explained in 
Section 13.9.1.4. 
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When a node boots, autostart is disabled until you enter the ENABLE 
AUTOSTART/QUEUES command. Typically, you should add this command to 
your site-specific startup command procedure or your queue startup command 
procedure to start a node’s autostart queues each time the node boots. 


13.9.1.4 Activating an Autostart Queue 


You must initially activate an autostart queue in one of the following ways: 


¢ Specify the /START qualifier in the INITIALIZE/QUEUE command used to 
create the queue, as follows: 


INITIALIZE/QUEUE/START|/qualifiers,...] queue-name 
¢ Enter a START/QUEUVE command after you create the queue, as follows: 
START/QUEUE[/qualifiers,...] queue-name 


Once an autostart queue is activated, it remains active unless the queue is 
stopped with the STOP/QUEUE/NEXT or STOP/QUEUE/RESET command. 
Shutting down a node does not deactivate autostart queues on the node. 


To start an autostart queue that has been deactivated by the STOP/QUEUE 
/NEXT or STOP/QUEUE/RESET command, enter the START/QUEUE command. 
The queue will then be automatically started by the queue manager. The queue 
will be started immediately if a node on which it can run is enabled for autostart. 
Otherwise, the queue will be started as soon as a node on which it can run is 
enabled for autostart. 


13.9.1.5 Monitoring Queue Information 


13-50 


You use the DCL command SHOW QUEUE to monitor the status of queues. To 
display queue information, enter the SHOW QUEUE command in the following 
format: 


SHOW QUEUE [/qualifier,...] [queue-name] 


If you do not specify a qualifier or a queue name, the system displays the status 
of all queues on the system and all jobs owned by you. The SHOW QUEUE 
qualifiers let you select the type of queue and the amount of information you 
want to display. 


Use the following qualifiers to select the information you want to display: 


Qualifier 


/BY_JOB_STATUS[=keyword.,...] 


/BATCH 
/DEVICE[=keyword.,...] 
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Description 


Displays queues that contain jobs of the 
specified status. You can specify one or more of 
the following keywords: 


executing 
holding 
pending 
retained 
timed_release 


If no keyword is specified, by default the jobs of 
all status are displayed. For more information 
about job status, see Table 13-5. 


Displays batch execution queues. 


Displays output execution queues. You can 
select a specific type of execution queue by 
entering one or more of the following keywords: 


printer 
terminal 
server 


If no keywords are specified, all types of output 
queue are displayed. 


/GENERIC Displays the status of generic queues. 

Use the following qualifiers to select the amount of information you want to 

display: 

Qualifier Description 

/ALL_JOBS Displays information about all jobs for the selected queues. 

/BRIEF Displays a brief listing of information about job entries in the queue. 
The brief listing is the default when no qualifier is specified with the 
SHOW QUEUE command. 

/FILES Adds a list of files associated with each job to the display. 

/FULL Displays complete queue and job information (also displays any ACLs set 


for the queues). 


/SUMMARY Displays the total number of executing, pending, holding, retained, and 
timed release jobs. The jobs themselves are not displayed. 


You can also combine certain qualifiers to further delineate the queue information 


you want to display. 


Table 138-4 defines queue statuses returned by the SHOW QUEUE command. 


Table 13-4 Queue Statuses Displayed in the SHOW/QUEUE Command 


Queue Status Description 

Aligning The queue manager is processing a START/QUEUE/ALIGN command. 
Autostart Queue was stopped and needs to be activated. For more information, 
inactive see Section 13.10.4. 


(continued on next page) 
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Table 13-4 (Cont.) Queue Statuses Displayed in the SHOW/QUEUE Command 


Queue Status 


Available 
Busy 
Closed 


Device 
unavailable 


Idle 
Paused 
Pausing 


Remote 
Resuming 


Server 
Stalled 
Starting 
Stopped 


Stop pending 


Stopping 


Description 
Queue is processing at least one job but is capable of processing 
additional concurrent jobs. 


Queue cannot process additional jobs because of one or more jobs in 
progress. 


Queue is closed and will not accept new jobs until it is set open. For 
more information, see Section 13.9.1.8. 


Device to which the queue is assigned is not available. 


Queue is not processing any jobs and is capable of doing so. 
A STOP/QUEUE command has been executed. 
The queue manager is processing a STOP/QUEVE command. 


Queue is assigned to a physical device that is not connected to the local 
system. 


The queue manager is processing a START/QUEUVE command on a 
paused queue. 


Queue processing is directed to a server symbiont. 

Symbiont processing temporarily halted due to device-related problem. 
Queue has been started, but the symbiont process is not yet active. 
The queue is stopped and will not process work until started. 


Queue will be in the stopped state when current jobs have finished 
executing. 


The queue is being stopped. 


To display the forms or characteristics available on a system, use the DCL 
command SHOW QUEUE/FORM or SHOW QUEUE/CHARACTERISTIC. 


You can further customize the type of queue information you want to monitor 
by writing a command procedure that uses the FSGETQUI lexical function. 
F$GETQUI invokes the $GETQUI system service to return information stored in 
the queue database. 


You can use the F$GETQUI lexical function to obtain information about the 
following types of objects: 


Characteristics 


Forms 


Queues 


Jobs contained in queues 
Files of jobs contained in queues 


For example, you could write a command procedure to display the total number of 
blocks of jobs in a pending state in all printer queues. You must have read access 
to the job or SYSPRV or OPER privilege to obtain job and file information. 


See the OpenVMS DCL Dictionary for detailed information about the SHOW 
QUEUE command and the F$GETQUI lexical function. For more information 
about the system service invoked by the F$GETQUI lexical function, refer to the 
description of the $GETQUI system service in the OpenVMS System Services 
Reference Manual. 
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Examples 


1. The following example displays summary information for all printer and 
terminal queues: 


$ SHOW QUEUE/SUMMARY/DEVICE=( PRINTER, TERMINAL) 


Printer queue HERA LPAQ, busy, on HERA::LPA0, mounted form DEFAULT 
<Printer queue on node HERA for a line printer> 


Job summary: 1 executing 


Printer queue HERA LPBO, busy, on HERA::LPB0, mounted form DEFAULT 
<Printer queue on node HERA for a line printer> 


Job summary: 1 executing 


Generic printer queue CLUSTER PRINT 
<Generic printer queue for LPA0: and LPB0:> 
Job summary: 1 holding 


Terminal queue LQ PRINT, stopped, on HERA::TXA?7:, 
<Letter quality printer in Bob’s office> 
mounted form PORTRAIT INDENTED (stock=DEFAULT) 


Job summary: 2 pending (445 blocks), 1 holding 


2. The following example displays the full status and options of all executing 
jobs: 


$ SHOW QUEUE/FULL/ALL/BY_JOB_STATUS=EXECUTING 


Batch queue HERA BATCH, available, on HERA:: 
/AUTOSTART ON=(HERA::) /BASE PRIORITY=3 /JOB_LIMIT=25 /OWNER=[SYSTEM] 
/PROTECTION=(S:E,0:D,G:R,W:W) 


Entry Jobname Username Status 
700 VUE SMITH Executing 
Submitted 25-JUL-1994 14:46 /KEEP /NOLOG /NOPRINT /PRIORITY=100 
File: $333$DISK1:[SMITH.COM]VUE.COM;19 (executing) 


Batch queue ZZ BATCH, available, on 22:: 
/AUTOSTART ON=(2Z::) /BASE PRIORITY=3 /JOB LIMIT=25 /OWNER=[SYSTEM] 
/PROTECTION=(S:E,0:D,G:R,W:W) 


Entry Jobname Username Status 
874 PIPE FITZGERALD Executing 
Submitted 26-JUL-1994 11:25 /KEEP /NOTIFY /NOPRINT /PRIORITY=100 
/RESTART=CLUSTER BATCH /RETAIN=UNTIL="0 01:00" 
File: $333$DISK1:[FITZGERALD]PIPE.COM;2 (executing) 


Server queue NMSQUEQO1, available, on HERA::, mounted form DEFAULT 
/ BASE PRIORITY=4 /DEFAULT=(FEED,FORM=DEFAULT) /OWNER=[DOC, SMITH] 
/PROCESSOR=NMSDAEMON /PROTECTION=(S:E,0:D,G:R,W:R) /RETAIN=ERROR 


Entry Jobname Username Blocks Status 


236 NM ROSENBERG 12 Processing 
Submitted 23-JUL-1994 08:42 /FORM=DEFAULT /PRIORITY=100 
File: $5$DISK3:[FOLK$ .NM]NM$J1991072308340647.WRK;1 
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13.9.1.6 Modifying a Queue 


You can use the INITIALIZE/QUEUE, START/QUEUE, and SET QUEUE 
commands to change queue options; as you change queue options, information 
about the queue in the queue database is updated. You can use the INITIALIZE 
and START commands only on stopped queues. 


The SET QUEUE command lets you change many queue options without 
having to stop the queue, initialize it, and restart it. For example, the following 
command modifies the running batch queue, SYS$BATCH: 


$ SET QUEUE/JOB_LIMIT=4/DISABLE_SWAPPING SYSSBATCH 


The command in this example changes the job limit for the queue and disables 
swapping for all jobs processed in SYS$BATCH. All other options of the queue 
remain the same. The changed options do not affect the execution of current jobs; 
however, all subsequent jobs are executed with the new options in effect. 


How to Perform This Task 

To change queue options that cannot be altered with the SET QUEUE command, 
use the following procedure: 

1. Stop the queue with the STOP/QUEUE/NEXT command. 


2. Restart the queue with the START/QUEUE or the INITIALIZE/QUEUE — 
/START command, specifying the appropriate qualifiers for the options you 
desire. 


Any qualifiers that you do not specify remain as they were when the queue 
was previously initialized, started, or set. 


Note that initializing an existing queue does not delete any current jobs in that 
queue. Any new queue settings established by the new INITIALIZE/QUEUE 
command affect all jobs waiting in the queue or subsequently entering the queue. 


See Table 13-1 for a list of the options that can be used for batch and output 
queues. 


13.9.1.7 Pausing a Queue 


The DCL command STOP/QUEUE (when used without qualifiers) temporarily 
suspends the execution of all current jobs in the queue and places the queue in 
a paused state. Pausing an output queue lets you enter print job positioning 
and alignment commands to the print symbiont. (See Section 13.9.6.9 for more 
information about using the STOP/QUEUE command to control print jobs.) 


To resume the execution of a paused queue, enter the DCL command START 
/QUEUE. 


13.9.1.8 Closing a Queue 
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When a queue is not available for an extended period of time (for example, when 
a printer needs to be serviced), you can prevent new jobs from entering the queue 
by specifying the /CLOSE qualifier with the SET QUEUE, INITIALIZE/QUEUE, 
or START/QUEUVE command. The /CLOSE qualifier prevents users from entering 
jobs in the queue with PRINT or SUBMIT commands. When a user attempts to 
print or submit a job to a closed queue, the job is rejected, and the user is notified 
that the queue is closed. For example: 


$ PRINT/QUE=$PRINTER_1 REPORT. TXT; 
$PRINT-F-CREJOB, error creating job . 
-JBC-E-QUE CLOSED, queue closed, jobs not accepted 


Jobs currently in the queue are not affected. 
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When the queue is available again, use the /OPEN qualifier to open the queue for 
incoming jobs. 


13.9.1.9 Stopping a Queue 
To stop a queue, enter one of the following commands, according to the desired 
stop queue operation: 


Command Description 


STOP/QUEUE/NEXT Lets all currently executing jobs complete and then stops 
the queue. Once you enter this command, all new jobs are 
prevented from executing. 


STOP/QUEUE/RESET Abruptly stops the queue and returns control to the 
system. Any jobs that are currently executing are stopped 
immediately. 


If the queue is not set to retain jobs completed with an 
error status, you might want to use the SET QUEUE 
/RETAIN=ERROR command to do so before stopping the 
queue with the STOP/QUEUE/RESET command. This 
causes the queue to retain information about aborted jobs. 


For print jobs retained on error, you can use the SET 
ENTRY/RELEASE/NOCHECKPOINT command to restart 
the interrupted jobs from the beginning. Print jobs are 
restartable by default; batch jobs are not restartable unless 
submitted with the /RESTART qualifier. 


For autostart queues, these commands deactivate a queue for autostart as 
explained in Section 13.9.1.10. To restart a stopped nonautostart queue or to 
reactivate a deactivated autostart queue, enter the START/QUEUE command. 


13.9.1.10 Preventing Autostart Queues from Starting 


With autostart queues, the STOP/QUEUE/NEXT or STOP/QUEUE/RESET 
command stops a queue and marks it inactive for autostart until the START 
/QUEUE command is entered. The STOP/QUEUE/NEXT or STOP/QUEUE 
/RESET command prevents an autostart queue from being automatically 
restarted. 


You might use this feature to prevent an autostart output queue from accidentally 
restarting when a printer is being serviced. 


13.9.1.11 Disabling Autostart on a Node 


The DISABLE AUTOSTART/QUEUES command notifies the queue manager to 
perform the following tasks on the affected node: 


e Prevent autostart queues from failing over to the node. 


e Mark all autostart queues on the node as “stop pending” in preparation for a 
planned shutdown. This lets jobs currently executing on the queues complete. 


e Upon completion of any jobs currently executing on one of the node’s autostart 
queues, force the queue to fail over to the next available node in the queue’s 
failover list on which autostart is enabled. (An autostart queue can only fail 
over if you have set it up to run on more than one node.) 


The DISABLE AUTOSTART/QUEUES command affects only autostart queues. 
By default, the command affects the node from which it is entered. However, you 
can specify the /ON_NODE qualifier to disable autostart on a different node. 
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The DISABLE AUTOSTART/QUEUES command should be used prior to shutting 
down a node. For more information, on disabling autostart before shutting down 
a system, see Section 13.9.1.13. 


For more information on the DISABLE AUTOSTART/QUEUES command, see the 
OpenVMS DCL Dictionary. 


13.9.1.12 Stopping All Queues on a Node 


To stop all queues on a node without stopping the queue manager, enter the DCL 
command STOP/QUEUES/ON_NODE. By default, this command affects the node 
on which the command is entered. To stop queues on a different node, specify the 
name of the node on which queues are to be stopped as follows: 


STOP/QUEUES/ON_NODE=node-name 


When you enter the STOP/QUEUES/ON_NODE command, nonautostart queues 
and autostart queues without a failover list are stopped. Autostart queues 
created or started with a failover list fail over to the next available node in that 
list that has autostart enabled. In all cases, currently executing jobs are aborted. 


However, you can allow jobs executing on autostart queues to complete by 
entering the DISABLE AUTOSTART/QUEUES command and waiting for jobs 
to complete before entering the STOP/QUEUES/ON_NODE command. For more 
information, see Section 13.9.1.13. 


The STOP/QUEUES/ON_NODE command is included in the shutdown command 
procedure SYS$SYSTEM:SHUTDOWN.COM. For more information, see 
Section 13.9.1.13. 


13.9.1.13 Stopping Queues Before Shutting Down a System 
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The following commands are included in the shutdown command procedure 
SYS$SYSTEM:SHUTDOWN.COM and are automatically executed when you shut 
down a node using SHUTDOWN.COM: 


e DISABLE AUTOSTART/QUEUES 
e STOP/QUEUES/ON_NODE 


Allowing Jobs to Complete Before Stopping Autostart Queues 

The STOP/QUEUES/ON_NODE command aborts jobs and stops all queues on 
a node; the DISABLE AUTOSTART command allows jobs on autostart queues 
to finish processing before failing over or stopping autostart queues. If your 
configuration uses autostart queues, you might want to allow jobs on those 
queues to complete before stopping your queues. 


In SHUTDOWN.COM, the STOP/QUEUES/ON_NODE command is executed 
shortly before the node is shut down. When using SHUTDOWN.COM, you can 
ensure that jobs on autostart queues have time to complete before the queues 
are stopped by specifying the time interval between the DISABLE AUTOSTART 
/QUEUES command and the shutdown. Use one of the following methods: 
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Timing Method 
Before executing Define the logical name SHUTDOWN$DISABLE_AUTOSTART 
SHUTDOWN.COM to be the number of minutes as follows: 


DEFINE/SYSTEM/EXECUTIVE_MODE SHUTDOWNSDISABLE _ 
AUTOSTART number-of-minutes 


While executing Specify the number of minutes as a shutdown option as follows: 


SHUTDOWN.COM 
Shutdown options [NONE]:DISABLE AUTOSTART=number-of- 


minutes 


Determine an appropriate number of minutes for your configuration, based on the 
number and type of jobs in the autostart queues. 


If you shut down a node without using SHUTDOWN.COM, you might want to 
enter the DISABLE AUTOSTART/QUEUES command and wait a few minutes 
to allow jobs on autostart queues to finish processing before you enter the STOP 
/QUEUES/ON_NODE command. 


13.9.1.14 Assigning a Logical Queue 


When a problem occurs with a print device, you can reroute the queue associated 
with that device to another queue associated with a functioning device. By 
creating a logical queue out of a malfunctioning execution queue, all of the 

jobs submitted to that queue will execute in another queue. Use the following 
procedure to create a logical queue that redirects its jobs to another queue: 


1. Stop the queue associated with the malfunctioning print device by entering a 
command in the following format: 


STOP/QUEUE/NEXT source_queue 


This command inhibits new jobs from processing but lets the current job finish 
processing, unless the print device is inoperable. If the device is inoperable, 
use the STOP/QUEUE/RESET command to halt the queue and immediately 
cancel all output from the device. 


2. Take the device off line. 


Reroute existing jobs from the malfunctioning print device to another print 
device by entering a command in the following format: 


ASSIGN/QUEUE target_queue source_queue 


Check to be sure that the options of the new print device are appropriate for 
processing the new jobs. 


To deassign the logical queue, enter the following command: 
DEASSIGN/QUEUE source_queue 


13.9.1.15 Moving All Jobs from One Queue to Another 
Before you delete a queue, you might want to requeue all jobs in the queue to 
another queue. To do so, enter a command in the following format: 


ASSIGN/MERGE target-queue source-queue 


Target-queue is the queue to which you are moving the jobs. Source-queue is the 
queue to be deleted. 
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The ASSIGN/MERGE command moves all jobs currently in the source queue. If 
new jobs are entered into the source queue before it is deleted, those new jobs 
remain in the source queue, and are not transferred to the target queue. You 
might want to close the queue to prevent new jobs from being entered in the 
queue, as explained in Section 13.9.1.8, before entering the ASSIGN/MERGE 


command. 


For ongoing redirection of jobs, use the ASSIGN/QUEUE command as explained 


in Section 13.9.1.14. 


13.9.1.16 Deleting a Queue 


Perform the following steps to delete a queue: 


1. Stop the queue by entering the STOP/QUEUE/NEXT command. (Use STOP 
/QUEUE/RESET if you want to abort all executing jobs.) 


Wait for executing jobs to complete. 


Requeue the entries still pending in the queue. If you do not perform this 
step, jobs will be deleted along with the queue. 


4. Remove all references to the queue from generic queues or jobs. See 
Section 13.10.5 for more information about removing references to queues. 


5. Delete the queue by entering the DELETE/QUEUE command. 


For more information, see the DELETE/QUEUE command in the OpenVMS DCL 
Dictionary. See Section 13.10.5 for help solving problems deleting a queue. 


13.9.2 Managing Characteristics 


Use the following commands when working with characteristics: 


Command 


DEFINE/CHARACTERISTIC 


DELETE/CHARACTERISTIC 
SHOW QUEUE/CHARACTERISTIC 


INITIALIZE/QUEUE/CHARACTERISTICS 
SET QUEUE/CHARACTERISTICS 
START/QUEUE/CHARACTERISTICS 


SHOW QUEUE/FULL 


PRINT/CHARACTERISTIC 
SUBMIT/CHARACTERISTIC 
SET ENTRY/CHARACTERISTIC 


13.9.2.1. Defining Characteristics 


No characteristics are defined by default. To define a characteristic, use the 
DEFINE/CHARACTERISTIC command in the following format: 


DEFINE/CHARACTERISTIC characteristic-name characteristic-number 
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For example: 


$ DEFINE/CHARACTERISTIC EAST 1 


Description 


Creates a characteristic and assigns 
a name and number. 


Deletes a characteristic. 


Displays information about 
characteristics defined for the 
system. 


Specifies one or more characteristics 
for processing jobs on a queue. 


Displays information about a 
queue, including any characteristics 
assigned to the queue. 


Specifies the name or number of 
one or more characteristics to be 
associated with the job. 
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For more information, see the DEFINE/CHARACTERISTIC command in the 
OpenVMS DCL Dictionary. 


Note 


If you. want to define a characteristic name that is also an existing logical 
name, make sure you read the documentation of logical names in the 
OpenVMS User’s Manual. 


13.9.2.2 Displaying Characteristics Defined on a System 


To see the characteristics defined on a system, enter the SHOW QUEUE 
/CHARACTERISTIC command. For example: 


$ SHOW QUEUE/CHARACTERISTIC 


Characteristic name Number 
EAST 1 
WEST 2 
NORTH 3 
SOUTH 4 


13.9.2.3 | Assigning Characteristics to a Queue 


No characteristics are assigned to a queue by default. To assign characteristics 
to a queue, include the /CHARACTERISTICS qualifier with the INITIALIZE 
/QUEUE, START/QUEUE, or SET QUEUE command as follows: 


SET QUEUE/CHARACTERISTICS=characteristicf,...] queue-name 
For example: 
$ SET QUEUE/CHARACTERISTICS=(EAST) LNO3 1 


For more information, see the /CHARACTERISTICS qualifier of the INITIALIZE 
/QUEUE command in the OpenVMS DCL Dictionary. 


13.9.2.4 Displaying Characteristics Assigned to a Queue 


To determine the characteristics defined for a queue, enter the DCL command 
SHOW QUEUE/FULL. For example: 


$ SHOW QUEUE/FULL LN03 1 
Printer queue LN03 1, idle, on HERA::TTA3, mounted form DEFAULT 
<Printer queue on node HERA for an LNO3 printer> 
/BASE PRIORITY=4 /CHAR=(1) /DEFAULT=(FLAG=ONE, FORM=LN03$PORTRAIT 
(stock=DEFAULT)) /LIBRARY=LNO3LIBRARY Lowercase 
/OWNER=[SYSTEM] /PROCESSOR=LATSYM /PROTECTION=(S:E,0:D,G:R,W:W) 
/SEPARATE=(RESET=(ANSISRESET) ) 


13.9.2.5 Canceling Characteristics Assigned to a Queue 


To cancel characteristics assigned to a queue, specify the 
/NOCHARACTERISTICS qualifier with the INITIALIZE/QUEUE, START 
/QUEUE, or SET QUEUE command. For example: 


$ SET QUEUE/NOCHARACTERISTICS 
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13.9.2.6 Deleting Characteristics 
To delete a characteristic definition, enter the DCL command DELETE 
/CHARACTERISTIC. For example: 
$ DELETE/CHARACTERISTIC EAST 


You must specify the characteristic name with the DELETE/CHARACTERISTIC 
command. If you know the number assigned to the characteristic but do not know 
the name, enter the SHOW QUEUE/CHARACTERISTIC command to display the 
names and numbers assigned to characteristics on the system. 


For more information about the DELETE/CHARACTERISTIC command, see the 
OpenVMS DCL Dictionary. 


If the system displays the following messages, a queue or job refers to the 
characteristic: 


$DELETE-E-NOTDELETED, error deleting characteristic 
-JBC-E-REFERENCED, existing references prevent deletion 


You must remove all references to the characteristic before you can delete the 
characteristic. For information about removing references to a characteristic, see 
Section 13.10.5. 


13.9.3 Managing Banner Pages 


For a detailed description of banner pages, see Section 13.8.7. Use the following 
commands when working with banner pages: 


Command Description 
INITIALIZE/QUEUE/SEPARATE<option Specifies one or more of the 
START/QUEUE/SEPARATE option following job banner page options: 
SET QUEUE/SEPARATE=option 

[NOJBURST 

[NO]FLAG 

[NO]JTRAILER 


The job banner pages you specify 
for a queue cannot be overridden 
by the user. 


INITIALIZE/QUEUE/DEFAULT=option=keyword Specifies one or more of the 
START/QUEUE/DEFAULT*=option=keyword following file banner page options: 
SET QUEUE/DEFAULT=option=keyword 

[NOJBURST 


[NOJFLAG 
[NOJTRAILER 


Keyword can be either ALL or 
ONE. 


Users can override the file banner 
page settings you specify for a 
queue by specifying the BURST, 
FLAG, and TRAILER qualifiers 
with the PRINT command. 


PRINT/BURST[=keyword] Specifies the ALL or ONE keyword 
to override, for the job, the file 
burst pages specified for the queue. 
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Command 


PRINT/FLAG[=keyword] 


PRINT/TRAILER[=keyword] 
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Description 


Specifies the ALL or ONE keyword 
to override, for the job, the file flag 
pages specified for the queue. 


Specifies the ALL or ONE keyword 
to override, for the job, the file 
trailer pages specified for the 
queue. 


13.9.4 Managing Forms 


To use forms with your queues, take the following steps: 


L. 
2 


Define a form. For more information, see Section 13.9.4.1. 
If desired, assign a default form for each output execution queue. For more 
information, see Section 13.9.4.4. 


If you do not assign a default form to a queue, the queue uses the systemwide 
default form, DEFAULT. If you want to change the DEFAULT form, you must 
do so before creating any queues that reference the DEFAULT form. For more 
information, see Section 13.9.4.3. 


Inform users of the available forms and the queues with which they should be 


“used. In addition, you can create symbols to automatically include the form 


with the PRINT command as follows: 
$ PRINT REPORT :== PRINT/FORM=REPORT 


If you see a print job pending because of a stock mismatch, change the stock 
of the printer to the requested stock and mount the form associated with the 
requested stock on the queue, as explained in Section 13.9.4.5, or perform one 


of the other steps explained in Section 13.10.2.1. 


Use the following commands when working with forms: 


Command 


DEFINE/FORM 
SHOW QUEUE/FORM/FULL 


DELETE/FORM 


INITIALIZE/QUEUE/DEFAULT=FORM 
START/QUEUE/DEFAULT=FORM 
SET QUEUE/DEFAULT=FORM 


PRINT/FORM 
SET ENTRY/FORM 


INITIALIZE/QUEUE/FORM_MOUNTED 
START/QUEUE/FORM_MOUNTED 
SET QUEUE/FORM_MOUNTED 


SHOW QUEUE/FULL 


Description 


Creates a form and assigns a name 
and number. 


Displays information about forms 
available on a system. 


Deletes a form. 


Specifies the name or number of the 
default form for an output execution 
queue. 


Specifies the name or number of the 
form to be associated with a print job. 


Specifies the name or number of the 
mounted form for an output execution 
queue. 


Displays information about a queue, 
including the default form for the 
queue and the form mounted on the 
queue. 
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13.9.4.1 Defining a Form 


To create a form, enter the DEFINE/FORM command as follows: 


DEFINE/FORM form-name form-number [/qualifiers] 


You can specify any of the following qualifiers: 


Qualifier 


/WIDTH=n 
/LENGTH=n 


/[NOJTRUNCATE 


/[NOJWRAP 


/MARGIN=(option=n[,...]) 


/[NOJPAGE_SETUP=(module[,...]) 


/SETUP=(nodule[,...]) 


/[NO]JSHEET FEED 


/STOCKestring 


/DESCRIPTIONSstring 


Purpose 


Specifies the physical width of the paper in 
characters. 


Specifies the physical length of a form page in 
lines. 


Specifies that characters exceeding the line 
length specified by /WIDTH and /MARGIN be 
discarded. See Section 13.8.11. 


Specifies that characters exceeding the line 
length specified by (WIDTH and /MARGIN be 
wrapped to the next line. See Section 13.8.11. 


Specifies the number of blank spaces for one 
or more of the four margin options: BOTTOM, 
LEFT, RIGHT, and TOP. 


Specifies one or more device control modules 
that set up a device at the start of each page. 
See Section 13.9.5.3. 


Specifies one or more device control modules 
that set up the device at the start of each file. 
See Section 13.9.5.3. 


Specifies that print jobs pause at the end of 
every physical page so that a new sheet of 
paper can be inserted. 


Specifies the type of paper stock to be 
associated with the form. 


Specifies a string used to provide information 
about the form. 


If you create forms only to provide different formatting options (and not to specify 
paper stock), specify the same stock type for each of the different forms. That 
way, jobs requesting any of these forms will print on the same queue without 
requiring you to enter any additional commands to modify the queue. Unless 
you specify the /STOCK qualifier, the form’s stock is the same as the name of the 


form. 


Note 


If you want to define a form name that is also an existing logical name, 
make sure you read the documentation of logical names in the OpenVMS 


User’s Manual. 


For more information about the DEFINE/FORM command, see the OpenVMS 


DCL Dictionary. 
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Example 
The command in the following example defines the form MEMO as the number 3 
and defines formatting options for the form: 


$ DEFINE/FORM MEMO 3/STOCK=DEFAULT - 
_$ /MARGIN=(TOP=2, BOTTOM=2, LEFT=6 ) /WIDTH=80/LENGTH=66/TRUNCATE - 
_$ /DESCRIPTION="LN03 indented memo format" 


13.9.4.2 Displaying Forms Defined on a System 


To display forms defined on a system, enter the SHOW QUEUE/FORM/FULL 
command. If you know the name of the form you want to display, you can specify 
the form name as a parameter to the command. For example: 


$ SHOW QUEUE/FORM/FULL MEMO 


Form name Number Description 

MEMO (stock=DEFAULT) 110 LN03 indented memo format 
/LENGTH=66 / MARGIN=(TOP=2 , BOTTOM=2 , LEFT=5 ) /STOCK=DEFAULT /TRUNCATE 
/WIDTH=80 

For more information, see the SHOW QUEUE/FORM command in the OpenVMS 

DCL Dictionary. 


13.9.4.3 Changing the Systemwide Default Form 
The operating system includes a systemwide default form, named DEFAULT, that 
corresponds to the form number 0 and has a stock named DEFAULT. A queue 
initialized without the /DEFAULT=FORM qualifier uses the systemwide default 
form to process print jobs not explicitly associated with a form definition. The 
systemwide DEFAULT form uses the following options: 


Form name Number Description 

DEFAULT 0 —-«~System-defined default 
/MARGIN=(BOTTOM=6) /STOCK=DEFAULT /TRUNCATE /WIDTH=132 
/LENGTH=66 


To change the systemwide default form, enter the DEFINE/FORM command in 
the following format: 


DEFINE/FORM DEFAULT 0 /qualifier[s] 


For example, to change the systemwide default form’s bottom margin from 6 to 4, 
and the page length from 66 to 55, enter this command: 


$ DEFINE/FORM DEFAULT 0/MARGIN=(BOTTOM=4 ) /LENGTH=55 


Note 


Once a queue or job references a form, you cannot change the stock for 
that form. Therefore, if you want to change the stock of the DEFAULT 
form, you should do so before any queues are created. 
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13.9.4.4 Assigning a Default Form for a Queue 


If a user does not specify the /FORM qualifier when submitting a job with the 
PRINT command, the job uses the default form for the execution queue on which 
the job is printed. 


To assign a default form for an output execution queue, specify the /DEFAULT 
qualifier with the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE 
command as follows: 


INITIALIZE/QUEUE/DEFAULT=FORM=form-name-or-number 


Note 


The queue’s default form is associated with a print job at the time the job 
is processed unless a specific form is requested by the user when the job is 
submitted. Therefore, if a user submits a job to a generic queue without 
specifying the /FORM qualifier, no form is associated with the job until it 
is transferred to an execution queue. 


If you do not establish a default form for a queue, the queue uses the systemwide 
default form, DEFAULT. 


13.9.4.5 Mounting a Form on a Queue 


Mounting a form on a queue associates the stock of the form with the queue. 
The stock of the form mounted on a queue should match the stock of the paper 
physically loaded in the queue’s printer. A queue’s mounted form affects the 
scheduling of all jobs in the queue. If the stock of a job does not match the stock 
of the form currently mounted, the job is held pending because of stock mismatch 
and is not scheduled. When this happens, you can mount a different form on 
the queue by using the /FORM_MOUNTED qualifier with the SET QUEUE 
command. 


You mount a form on a queue by specifying the /FORM_MOUNTED qualifier with 
the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command as follows: 


INITIALIZE/QUEUE/FORM_MOUNTED=form-name-or-number 


See Section 13.10.2.1 for other steps you can take to fix jobs that are pending 
because of stock mismatch. See the OpenVMS DCL Dictionary for more 
information about the /FORM_MOUNTED qualifier. 


13.9.4.6 Displaying the Form Assigned to a Queue 
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To find the default form for a queue, enter the DCL command SHOW QUEUE 
/FULL. For example: 


$ SHOW QUEUE/FULL JEAN PRINT 

Printer queue JEAN PRINT, idle, on BAY::TTA3:, mounted form 8 5x11 
<Queue for printer in Jean's office> 
/BASE_PRIORITY=4 /DEFAULT=(FEED,FORM=REPORT (stock=8_5X11)) /OWNER=[SYSTEM] 
/PROTECTION=(S:E,0:D,G:R,W:W) 


In this example, the default form is REPORT and its stock is 8_5x11. All jobs 
processed on this queue that are not associated with an explicit form definition 
in the PRINT command have the default form REPORT. As long as the stock of 
the mounted form matches the stock of the default form, all jobs submitted to this 
queue without an explicit form definition will be scheduled to print. 
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13.9.4.7 Deleting a Form 


To delete a defined form, enter the DCL command DELETE/FORM. For example: 
§ DELETE/FORM MEMO 


You must specify the form name with the DELETE/FORM command (not the 
form number). If you know the number assigned to the form but do not know 
the name, enter the SHOW QUEUE/FORM command to display the names and 
numbers assigned to forms on the system. 


For information about the DELETE/FORM command, see the OpenVMS DCL 
Dictionary. 


If the system displays the following messages, a queue or job exists with a 
reference to the form: 


$DELETE-E-NOTDELETED, error deleting form-name 
-JBC-E-REFERENCED, existing references prevent deletion 


You must remove all references to the form before you can delete the form. For 
information about removing references to a form, see Section 13.10.5. 


13.9.5 Managing Device Control Libraries 


To use a device control library module, perform the following steps: 


1. Create a library and insert modules. For more information, see 
Section 13.9.5.1. 


2. Assign the device control library to a queue. (This step is not necessary if 
you use the default library SYSDEVCTL.TLB.) For more information, see 
Section 13.9.5.2. 


3. Create one or more forms with setup or page setup modules. This lets 
users request the form (and the accompanying setup or page setup modules) 
when they enter the PRINT/FORM command. For more information, see 
Section 13.9.5.3. | 


4. Assign a reset module to a queue. This specifies the reset module to follow 
each job printed on a queue. For more information, see Section 13.9.5.4. 


Use the following DCL commands to set up device control library modules for 
processing print jobs: 


Command Description 

DEFINE/FORM/SETUP=meodulel,...] Specifies one or more modules that set up 
the device before each file of a job that is 
printed when the form is mounted. 

DEFINE/FORM/[NOJPAGE_SETUP=module[....] Specifies one or more modules that set up 


the device before each page of a job that is 
printed when the form is mounted. 
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Command Description 
INITIALIZE/QUEUE/LIBRARY=filename Specifies the file name of the device 
START/QUEUE/LIBRARY=filename control library. The default library is 


SYS$LIBRARY:SYSDEVCTL.TLB. The 
value specified as filename must be 

a file name only, without a type or a 
directory. The file must be found in the 


SYS$LIBRARY directory. 
INITIALIZE/QUEUE/SEPARATE=[NO]JRESET=module[....] Assigns one or more modules to the queue. 
START/QUEUE/SEPARATE=[NOJRESET=module[,...] This causes the modules to be extracted 
SET QUEUE/SEPARATE=[NO]RESET=module[,...] from the device control library and copied 


to the device at the end of each job. The 
module can be used to restore the device to 
a known state at the end of each job. The 
default is NORESET. 


PRINT/FORM=/orm-name Calls for a print job to be processed 


according to the specified form. You can 
create a form to contain setup or page 
setup modules to be to be extracted from 
the device control library and copied to the 
printer at the start of each file or page. 


The following sections describe how to manage device control libraries. 


13.9.5.1 Creating a Device Control Library and Inserting Modules 
To create a device control library and insert modules, perform the following steps: 


di 


Create a device control library by entering a command in the following 
format: 


LIBRARY/CREATE/TEXT SYS$LIBRARY-filename.TLB 


Determine the contents of the module—either the text to be inserted or the 
escape sequences needed for the desired printer setup. To determine the 
proper escape sequences for a printer option, refer to the operation guide for 
the specific printer. 


Create a module file and enter the appropriate escape sequences, carriage 
control characters, or text. You create and edit a module file as you would any 
other text file. Make sure the text editor you use does not insert a carriage 
return or line feed at the end of your file. This will affect your printer output. 


Insert the module into the device control library by entering the following 
command: 


LIBRARY/INSERT/TEXT library-file module-file 


Note 


To add a module to or delete it from a library, you must stop all output 
queues assigned to that library. 


See the OpenVMS Command Definition, Librarian, and Message Utilities Manual 
for more information about creating libraries and inserting modules. 
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13.9.5.2 Assigning a Library to a Queue 
You assign a device control library to an output queue by specifying the 
/LIBRARY qualifier with the INITIALIZE/QUEUE or START/QUEUE command 
in the following format: 


INITIALIZE/QUEUE/START/LIBRARY=filename queue-name 


The file name is the name of the library file that contains the desired 

modules. Libraries must be in SYS$LIBRARY and must have the file type 
.TLB. If you do not specify the /LIBRARY qualifier, the default library is 
SYS$LIBRARY:SYSDEVCTL.TLB. You can use the /LIBRARY qualifier to specify 
an alternate device control library. For example: 


$ INITIALIZE/QUEUE/LIBRARY=LNO3DEVCTL LNO 3 A QUE 


Note 


If you specify a value for the /LIBRARY qualifier, do not include the 
directory, file type, or version number. The system assumes that the file 
is in SYS$LIBRARY and has the type .TLB. If you copy a library file from 
another node, be sure that the new library has a unique file name. 


Operations that request a particular device control library module use the module 
from the library specified for the queue. If you have a small configuration of 
printers and normally use only a few modules, you usually store all modules in a 
single library and assign that same library to each printer queue. 


For sites with a large number of different printers, you usually create and 
assign a separate device control library for each type of printer. If you have a 
separate device control library for each type of printer, Digital recommends you 
give modules that perform the same function an identical name in all libraries, 
even though the modules contain escape sequences unique to the specific type of 
printer. For example, if three libraries contained modules that set up a printer 
for landscape orientation, these modules might be named LANDSCAPE in all 
three libraries. This allows you to use the same form on any queue for which a 
library contains a module of the specified name, even though the modules might 
contain different device-specific sequences. 


If you use a single library to store modules for different types of printers, make 
sure that each module has a unique name. 


Use the following command format to display a listing of all modules contained 
within a specified library: 


LIBRARY/LIST/FULL SYS$LIBRARY:library-name.TLB 


13.9.5.3 Creating Forms for Setup and Page Setup Modules 
To use setup or page setup modules with print jobs, Digital recommends you 
create forms that include these modules. Use DEFINE/FORM command with the 
/SETUP=module or /PAGE_SETUP=module qualifiers. The modules you specify 
with the /SETUP qualifier are sent to the printer when the form is mounted, 
before each file of a job is printed. Similarly, the modules you specify with 
/PAGE_SETUP are sent to the printer before each page of a job. 
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Once you have properly created a form that includes a setup or page setup 
module, users can request the module by including the /FORM qualifier with the 
PRINT command as follows: 


PRINT/FORM=form-name file-name /QUEUE=queue-name 


Users can also request a setup module by specifying the /SETUP=module qualifier 
with the PRINT command. Note, however, that the PRINT/FORM command has 
an advantage over the PRINT/SETUP command: When a user enters the PRINT 
/FORM command, the form name is checked for validity when the command is 
entered. With the PRINT/SETUP command, however, the module names are not 
checked until the job attempts to print. If a user makes an error while entering a 
module name, the job will not print, and the user will not be notified unless he or 
she also specified the /NOTIFY qualifier. 


13.9.5.4 Assigning a Reset Module to a Queue 
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To assign a module to an output execution queue to reset the printer to a known 
state at the end of each job, you use the /SEPARATE=RESET=module qualifier 
with the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command. For 
example: 


$ INITIALIZE/QUEUE/LIBRARY=MYDEVCTL/SEPARATE=RESET=MODULE2 PDQ QUE 


The reset sequence contained in the module resets the printer at the end of each 
job. It also resets the printer when the queue is started to ensure that the first 
job prints correctly. 


Because the /SEPARATE qualifier specifies mandatory queue options, the RESET 
module you specify is sent to the queue at the end of every job. The user cannot 
override this option. 


Example 
The following example uses device control library modules to process a print job. 
$ LIBRARY/CREATE/TEXT SYSSLIBRARY :MYDEVCTL.TLB 
$ EDIT MODULE1.TXT 
fenter printer escape sequences or text for modulel 
$ EDIT MODULE2.TXT 
lenter printer escape sequences or text for module2 


$ LIBRARY/INSERT SYSSLIBRARY:MYDEVCTL.TLB/TEXT MODULE1 

$ LIBRARY/INSERT SYSSLIBRARY:MYDEVCTL.TLB/TEXT MODULE2 

$ INITIALIZE/QUEUE/START/ON=TTA9:/LIBRARY=MYDEVCTL PDQ QUE 
$ SET QUEUE/SEPARATE=RESET=MODULE2 PDQ QUE ~ 

$ SHOW QUEUE/FULL PDQ QUE 


Terminal queue PDQ QUE, idle on TOAD::TTA9, mounted form DEFAULT 
/BASE_PRIORITY=4/DEFAULT=( FEED, FORM=DEFAULT) /LIBRARY=MYDEVCTL 
/OWNER=[1,4]/PROTECTION=(S:E,0:D,G:R,W:W) /SEPARATE=(RESET=(MODULE2) ) 


$ DEFINE/FORM/SETUP=MODULE1/STOCK=DEFAULT FORM1 1 

$ PRINT/FORM=FORM1 REPORT. TXT ,MEMO.TXT/QUEUE=PDQ QUE 

Job REPORT (Queue PDQ QUE, entry 619) started on PDQ QUE 

In this example, two device control modules are created and inserted into the 
library file MYDEVCTL.TLB. The escape sequence or text in the setup module 
named MODULE 1 is sent to the printer to set up the printer before REPORT.TXT 
is printed and again before MEMO.TXT is printed. The escape sequence or text 


in the reset module named MODULE2 is sent to the printer only once after both 
of the files in job REPORT have printed. 
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13.9.6 Managing Jobs 


As system manager, you are responsible for controlling the flow of batch and 
print jobs and for maintaining efficient job processing performance. Some of the 
routine tasks for managing jobs include the following: 


Task Section 
Monitoring jobs Section 13.9.6.1 
Modifying job processing options Section 13.9.6.2 
Holding and releasing a job Section 13.9.6.3 
Changing the scheduling priority of a job Section 13.9.6.4 
Requeuing an executing job Section 13.9.6.5 
Requeuing a pending job Section 13.9.6.6 
Retaining jobs in a queue Section 13.9.6.7 
Deleting a job Section 13.9.6.8 
Specifying the position at which a job should begin printing Section 13.9.6.9.1 
Aligning print forms Section 13.9.6.9.2 


13.9.6.1 Monitoring Jobs 


You use the DCL command SHOW ENTRY to monitor the status of batch and 
print jobs. (For information about job status, see Table 13-5.) Use the following 
format to specify the SHOW ENTRY command: 


SHOW ENTRY [entry-number|,...]], [job-name]....]] 


If you do not specify an entry number or job name, the system displays all jobs 
owned by you or by the user specified with the /USER_NAME qualifier. If you 
specify a job name, the system displays all jobs owned by you or by the user 
specified with /USER_NAME that match the specified character string. You can 
also display a group of jobs by entering a list of entry numbers or job names, or 
both, on the command line. 


Specify qualifiers with the SHOW ENTRY command to specify the type of job 
information you want to display. For more information, see the OpenVMS DCL 
Dictionary. 


Table 13—5 describes the job statuses returned by the SHOW ENTRY command. 


Table 13-5 Job Statuses Returned by SHOW ENTRY 


Status Description 

Aborting Executing job is terminating abnormally. 

Executing Job is executing from a batch queue. 

Holding Job is being held until explicitly released. For more 


information, see Section 13.9.6.3. 


Holding until Job is being held until a specified time. For more 
information, see Section 13.9.6.3. 


Pending Job is waiting to execute. For more information, see 
Section 13.10.2. 


(continued on next page) 
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Table 13-5 (Cont.) Job Statuses Returned by SHOW ENTRY 


Status Description 

Printing Job is executing from a printer or terminal queue. 

Processing Job is executing from a server queue. 

Retained on Completion Job remains in the queue upon completion. For more 
information, see Section 13.9.6.7. 

Retained on Error Job remains in the queue upon encountering an error. For 
more information, see Section 13.9.6.7. 

Retained Until Job remains in the queue until the specified time. For 
more information, see Section 13.9.6.7. 

Stalled Job is stalled because the physical device on which the 
queue is located is stalled. 

Waiting Symbiont refuses the job. 

Examples 


1. The following command displays jobs owned by user GARDNER: 
$ SHOW ENTRY /USER_NAME=GARDNER 


Entry Jobname Username Blocks Status 
4 TEST GARDNER Holding 
On available batch queue OPAL BATCH 
611 SET GARDNER 140 Pending 


On stopped printer queue LOQPRINT 


2. In the following example, the /FULL qualifier displays job status information, 
the time the job was submitted, the file specification, and the job processing 
options: 


$ SHOW ENTRY/FULL 4,611 


Entry Jobname Username Blocks Status 
4 TEST GARDNER Holding 
On available batch queue OPAL BATCH 
Submitted 15-JUN-1994 16:12 /LOG=_$5$DUA1:[GARDNER]TEST.LOG; 
/PRIORITY=100 
File: _$5$DUA1: [GARDNER ]TEST.COM; 8 


611 SET GARDNER 140 Pending (queue stopped) 
On stopped printer queue LOPRINT 
Submitted 21-JUN-1994 16:23 /FORM=DEFAULT /PRIORITY=200 
File: _S5$DUA1: [GARDNER ]SET.TXT;5 
File: _$5$DUA1: [GARDNER ]WAIT.TXT;1 


13.9.6.2 Modifying Job Processing Options 
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You can modify many job processing options by specifying qualifiers with a 
command in the following format: 


SET ENTRY/qualifier[,...) entry-number 


Table 13-6 lists some qualifiers that are frequently used to change jobs. For a list 
of all the job processing options you can change with the SET ENTRY command, 
see the OpenVMS DCL Dictionary. 
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Table 13-6 SET ENTRY Qualifiers for Changing Jobs 


Qualifier 


/[NOJAFTER=time 


Description 


Controls whether a job is held until after a 
specified time. For more information, see 
Section 13.9.6.3. 


/CHARACTERISTICS=(characteristic[,...]) Specifies the name or number of one or 


/FORM=form-name-or-number 


/[INOJHOLD 


/PRIORITY=n 
/RELEASE 


/REQUEUE=queue-name[:] 


/RESTART 


13.9.6.3 Holding and Releasing a Job 


more characteristics associated with a 
batch or print job. For more information, 
see Section 13.8.3. 


Specifies the name or number of the form 
to be associated with a print job. For more 
information, see Section 13.8.9. 


Controls whether a job is available for 
immediate processing or held until it 
is released for processing. For more 
information, see Section 13.9.6.3. 


Specifies the scheduling priority of the job. 
For more information, see Section 13.9.6.4. 


Releases a previously held job. For more 
information, see Section 13.9.6.3. 


Requests that the job be moved from the 
original queue to the specified queue; this 
qualifier can also be used with the STOP 
/QUEUE/ENTRY command. For more 
information, see Section 13.9.6.6. 


Specifies whether a batch or print job is 
restarted after a system failure or a STOP 
/QUEUE/REQUEUE command. Print jobs 
are restartable by default. Batch jobs are 
restartable only if submitted or modified 
with the /RESTART qualifier. 


Users can specify that a job be held in a queue before processing by specifying one 
of the following qualifiers with the PRINT, SUBMIT, or SET ENTRY command: 


e /AFTER=time-value holds a job until the specified time. 
e /HOLD holds a job indefinitely. 


You can use the following commands to hold and release jobs: 


Command 
SET ENTRY/HOLD 


SET ENTRY/AFTER=time-value 


Purpose 


Holds a job in a queue indefinitely before processing. 


Holds a job in a queue for processing after a specified 
time. 
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Command 


SET ENTRY/NOHOLD 


SET ENTRY/NOAFTER 


SET ENTRY/RELEASE 


Examples 


Purpose 


Releases a job that is held in a queue for any of the 
following reasons: 


e¢ Releases a job from Holding status. 


e Releases a job from Retained state (a job 
held in a queue by the /RETAIN qualifier). 
For more information, see Section 13.8.2 and 
Section 13.9.6.7. 


e Releases a job that was refused by a user-written 
symbiont. 


Releases a job with from a status of “Holding until 
time-value,” and does not wait until the specified time 
to schedule the job. 


Releases a job that is held in a queue for any of the 
following reasons: 


e Releases a job from Holding status. 


e Releases a job from a status of “Holding until 
time-value,” and does not wait until the specified 
time to schedule the job. 


e Releases a job from a Retained state (a job 
held in a queue by the /RETAIN qualifier). 
For more information, see Section 13.8.2 and 
Section 13.9.6.7. 


e Releases a job that was refused by a user-written 
symbiont. 


1. The following example holds a job until the specified time and subsequently 
releases the job before that time: 


$ SET ENTRY 1121/AFTER=12-JUL-1994:17:30 


$ SET ENTRY/NOAFTER 


2. The following example holds a job until the end of the current day (00:00:00 0 
o’clock) and subsequently releases the job before that time: 


$ SET ENTRY 1121/AFTER=TODAY 


$ SET ENTRY/NOAFTER 


3. The following example holds a job indefinitely and subsequently releases it: 


$ SET ENTRY 1234/HOLD 


$ SET ENTRY 1234/RELEASE 


13.9.6.4 Changing the Scheduling Priority of a Job 


The queue manager uses the following criteria to determine the scheduling order 
for batch and print jobs that are eligible for processing: 


1. Job scheduling priority 
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The queue manager checks the job’s scheduling priority. The job with the 
highest scheduling priority value is processed first. The job scheduling 
priority is different than the base process priority or current process priority. 
The user can specify job scheduling priority with the /PRIORITY qualifier of 
the PRINT or SUBMIT command. 


2. Size (optional, and applies only to output jobs) 


By default, the job size of an output job is checked. Among jobs of identical 
scheduling priority, the smallest sized job is processed first. 


The job size is not checked if the queue has been created, started, or 
modified to use the /SCHEDULE=NOSIZE option. For more information, 
see Section 13.8.6. 


3. Submission time 


If the jobs’ scheduling priorities are identical, the job that was submitted first 
is processed first. 


If a batch or print job cannot be processed, it is placed in a pending state and 
is not processed until the cause of the pending state is resolved. For more 
information, see Section 13.10.2. You can change the scheduling priority of a job 
by using the /PRIORITY qualifier with the SET ENTRY command as follows: 


SET ENTRY/PRIORITY=n entry-number 


Do not confuse the job scheduling priority with the process base priority on a 
queue. The job scheduling priority value must be in a range of 0 through 255, 
where 0 is the lowest priority and 255 is the highest. The default value for 
/PRIORITY is the value of the system parameter DEFQUEPRI (usually set at 
100). The following example changes the scheduling priority of a job to 50: 


$ SET ENTRY/PRIORITY=50 1131 


13.9.6.5 Requeuing an Executing Job 
To stop and requeue an executing print job, enter the STOP/QUEUE/REQUEUE 
command. This command suspends a currently executing job and requeues it 
to the specified queue. Other jobs remain pending in the queue until they are 
processed. 


Note 


The STOP/QUEUE/REQUEUE command stops only the job currently 
executing in the queue. The queue is not stopped. 


For example, suppose a job is executing in output execution queue BETA_LPBO 
when the printer on which the queue is running jams. If no other jobs are 
pending in the queue, you might want to stop and requeue the job to a queue 
running on another printer. Because the printer in this example is jammed, you 
might also want to stop the queue. To do so, you would enter commands similar 
to the following: 


$ STOP/QUEUE/REQUEUE=BETA LPAO BETA _LPBO 
$ STOP/QUEUE/RESET BETA_LPBO 


The first command causes the executing print job on BETA_LPBO to be stopped 
and requeued to BETA_LPAO. The second command stops queue BETA_LPBO. 
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If you are requeuing a job on a batch queue, you must include the /ENTRY=n 
qualifier. For example: 


$ STOP/QUEUE/ENTRY=1251/REQUEUE=FRED BATCH WILMA BATCH 
To hold an aborted job, specify the /HOLD qualifier as follows: 
STOP/QUEUE/REQUEUVE[=queue-name]/HOLD[/ENTRY=entry-number] queue-name 


When you specify /HOLD, the aborted job is placed in a hold state for later release 
with the SET ENTRY/RELEASE or SET ENTRY/NOHOLD command. 


To change the scheduling priority of the aborted job, specify the /PRIORITY 
qualifier as follows: 


STOP/QUEUVE/REQUEUVE[=queue-name]/PRIORITY=n[/ENTRY=entry-number] queue-name 
Specify the new priority as n. 


For more information about the STOP/QUEUE/REQUEUE command, see the 
OpenVMS DCL Dictionary. 


13.9.6.6 Requeuing a Pending Job 


To requeue a job that is pending in a queue, enter the SET ENTRY/REQUEUE 
command. For example: 


§ SET ENTRY/REQUEUE=LNO3$PRINT 196 
This command moves job 196 to the queue LNO3$PRINT. 


For more information about the SET ENTRY/REQUEUE command, see the 
OpenVMS DCL Dictionary. 


13.9.6.7 Retaining Jobs in a Queue 


Users can specify a retention option for a batch or print job by specifying the 
/RETAIN=option qualifier with the SUBMIT or PRINT command. 


To change the user-specified retention policy for a job, specify the /RETAIN=option 
qualifier with the SET ENTRY command in the following format: 


SET ENTRY/RETAIN=option entry-number 


Option is one of the following: 


Option Description 

ALWAYS Holds the job in the queue regardless of the job’s completion 
status. 

DEFAULT Holds the job in the queue as specified by the queue’s retention 


policy. For more information, see Section 13.8.2. If no policy 
has been set on the queue, the job is not retained. 


ERROR Holds the job in the queue only if the job completes 
unsucessfully. 
UNTIL=time-value Holds the job in the queue for a specified length of time, 


regardless of the job’s completion status. This lets you retain 
the job in the queue only as long as the job is needed and 
eliminates the need to delete the job from the queue later. The 
time value you specify is interpreted first as a delta time, then 
as a combination time, and finally as an absolute time. For 
information about specifying time values, see the OpenVMS 
User’s Manual. 
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For example, the following command retains job 172 in the queue until 3 hours 
after the job completes. At that time, the job will automatically be deleted from 
the queue: 


$ SET ENTRY/RETAIN=UNTIL="+3:00" 172 


For more information about user-specified job retention, see the /RETAIN 
qualifier for the PRINT, SUBMIT, or SET ENTRY command in the OpenVMS 
DCL Dictionary. 


You can set a job retention policy on a queue by specifying the /RETAIN qualifier 
with the INITIALIZE/QUEUE, START/QUEUE, or SET QUEUE command. For 
information, see Section 13.8.2. 


13.9.6.8 Deleting a Job 


Under certain circumstances, it is necessary to terminate an executing batch or 
print job. For example, you might need to terminate a batch job that has entered 
an endless loop. 


Follow this procedure to delete either a pending or an executing job: 


1. Determine the entry number of the job by entering one of the following DCL 
commands: 


SHOW ENTRY/USER_NAME=username [job-name] 
SHOW QUEUE/ALL [queue-name] 


If you do not know the job name, user name, or queue name, enter the 
following command: 


SHOW QUEUE/BATCH/ALL/BY_JOB_STATUS=EXECUTING 
2. Delete the job by entering a command in the following format: 
DELETE/ENTRY=(entry-number)[....]) 


Example 


Suppose a user has noticed that a job is processing in an endless loop. The user is 
not the owner of the job and lacks sufficient privilege to stop it. The user enlists 
your aid as the system manager. You might enter the following command: 


$ SHOW QUEUE/BATCH/ALL/BY_JOB_STATUS=EXECUTING 
Batch queue JADE BATCH, available, on JADE:: 


Entry Jobname Username Status 
312 ARTWORK HUNTER Executing 
Batch queue OPAL BATCH, available, on OPAL:: 
Entry Jobname Username Status 
317 STOCKS CHANDLER Executing 
Batch queue RUBY BATCH, available, on RUBY:: 
Entry Jobname Username Status 
888 TEMPO ENGLISH Executing 


$ DELETE/ENTRY=317 
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13.9.6.9 Pausing an Output Queue to Control Print Job Position and Alignment 
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Pausing an output queue lets you communicate with the print symbiont 
interactively. You enter the STOP/QUEUE command (without any qualifiers) 
to pause a queue. Once a queue is paused, you can perform operations such as 
the following: 


e Specify the position at which a suspended job is to resume printing. For 
example, suppose a printer has a paper jam and the first several pages of 
a print job are destroyed. You can pause the queue and restart the job, 
resuming printing at the beginning of the file. 


For more information, see Section 13.9.6.9.1. 


e Specify the number of pages and the type of data for aligning printer forms. 
For example, suppose a printer uses a paper stock that is a preprinted 
continuous-form paper. When you begin printing a job, you notice the paper 
is not correctly aligned, so output does not print in the correct space on the 
preprinted form. You could pause the queue and print sample data to help 
you correct the paper alignment. 


For more information, see Section 13.9.6.9.2. 


Note 


In order to perform these tasks, you must pause the queue with the STOP 
/QUEUE command after the job has begun printing. 


13.9.6.9.1 Specifying the Position of Print By default, when you pause a 
queue and restart it, printing resumes in the current job at a checkpoint near 
where it left off. To specify the position at which the current job is to resume 
printing, pause the queue, then enter the START/QUEUE command with any of 
the following qualifiers: 


Qualifier Description 


INOJBACKWARD[=pages] Specifies the number of pages the file is to be 
backspaced before printing is resumed. A value 
of 1 indicates that printing is to resume at the top of 
the current page. If you omit the page value, the file 
is backspaced one page. 


(INOJFORWARD[=pages] Specifies the number of pages the file is to be 
advanced before printing is resumed. A value of 
1 indicates that printing is to resume at the top of 
the next page. If you omit the page value, the file is 
advanced one page. 


/[NO]JSEARCHsSstring Specifies that printing is to resume at the page 
containing a particular search string. The search 
for the string moves forward, beginning on the 
page following the current page. During the search, 
consecutive tabs and spaces are treated as a single 
space, and character case is ignored. 


/TOP_OF_FILE Specifies that printing is to resume at the beginning 
of the file. 
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When you must use more than one positioning qualifier with the same START 
/QUEUVE command, file positioning is performed in the following order: 


1. /TOP_OF_FILE 


2. /FORWARD 
3. /BACKWARD 
4, /SEARCH 
Examples 


1. In the following example, the STOP/QUEUE command suspends the job that 
is currently printing on the printer queue JADE_PRINT and places that 
queue in the paused state. The START/QUEUE command releases the queue 
from the paused state. The /TOP_OF_FILE qualifier causes the job that was 
suspended to resume printing at the beginning of the file rather than at 
where it was interrupted. 


$ STOP/QUEUE JADE PRINT 
$ START/QUEUE/TOP_OF FILE JADE PRINT 


2. In the following example, the START/QUEUE command resumes output on 
printer SYS_LPAO after advancing 15 pages from the beginning of the file: 


$ START/QUEUE/TOP/FORWARD=15 SYS _LPAQ 


13.9.6.9.2 Aligning Print Forms To print alignment data to aid in aligning 
printer forms, pause the queue, then enter the START/QUEUE command along 
with the /ALIGN qualifier in the following format: 


START/QUEUE/ALIGN[=(optior]....])] 


The following options control the number of alignment pages and type of 
alignment data: 


Option Description 
MASK Specifies that input data is masked by replacing alphabetic characters 


with the character X and numeric characters with the number 9. Mask 
characters let you prevent the printing of sensitive information. If you 
omit the MASK option, data is printed unaltered. 


n A decimal number in the range 1 through 20 that specifies the number 
of alignment pages to print. By default, one page of alignment data is 
printed. 


You can use the /ALIGN qualifier along with any of the file positioning qualifiers 
described in the previous section. File positioning is performed before alignment 
data is printed. After the alignment is complete, the queue enters a paused 
state until you restart it by reentering the START/QUEUE command. Printing 
resumes from the point that alignment data started; that is, the task is 
backspaced over the pages printed for alignment. 


Example 


The command in the following example requests masked alignment for four pages 
of output: 


$ START/QUEUE/BACKWARD=2/ALIGN=(MASK,4) SYS LPAQ 
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In this example, the file for the job that was being printed when the queue was 
paused is backspaced two pages before alignment is performed. Four pages of 
alignment mask characters are printed. Then the output for the current job is 
positioned backward four pages, and the queue pauses. 


13.10 Solving Queue Problems 


The following sections can help you solve common queue problems: 


Problem Section 

General printer problems Section 13.10.1 
Pending jobs Section 13.10.2 
Stock mismatch problems Section 13.10.2.1 
Characteristics mismatch problems Section 13.10.2.2 
Stalled output queues Section 13.10.3 
Autostart queues that will not start Section 13.10.4 
Problems deleting queues, forms, and characteristics Section 13.10.5 
Problems adding or deleting a module from a device Section 13.10.6 


control library 


13.10.1 Determining the Cause of General Printer Problems 
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The following steps can help you determine the cause of general printer problems: 


1. Enter a command in the following format to determine the status of the queue 
with which the printer is associated: 


SHOW QUEUE/FULL queue name 
Table 13-4 lists and describes queue statuses. 


2. Enter the command SHOW LOGICAL SMBSRVSHR to determine whether 
the logical name SMBSRVSHR is assigned. If the logical name is assigned, 
deassign it by entering the command DEASSIGN SMBSRVSHR. In most 
cases, this logical name should not be defined. 


3. Ifa print request returns a fatal error or does not print, perform the following 
steps: 


Stop the queue by entering the STOP/QUEUE/RESET command. 


b. If the output device is spooled, despool it using the SET DEVICE 
/NOSPOOLED command. 


c. Copy the file you are attempting to print by entering the COPY command 
in the following format: 


COPY filename output-device: 


Be sure to include a colon (:) after the device name. 


If the COPY command does not produce output, a PRINT request will not 
work. 


4. Ifthe problem is on a queue using the LATSYM symbiont, try using the 
default symbiont, PRTSMB, and see if the problem persists. You can use the 
PRTSMB symbiont for printers on LAT ports. However, only one queue at a 
time will be able to send jobs to the printer. 
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To determine whether a queue is using the LATSYM symbiont, enter 
the SHOW QUEUE/FULL command. If the queue is using the LATSYM 
symbiont, the display shows the following words: /PROCESSOR=LATSYM. 


To change the queue’s symbiont to PRTSMB, perform the following steps: 
a. Stop the queue by entering the STOP/QUEUE/RESET command. 


b. Restart the queue using the START/QUEUE/NOPROCESSOR command. 


If a PRINT request succeeds when the queue is using PRTSMB, the problem 
is with LATSYM or with the LAT driver LTDRIVER. 


5. Attach a terminal at the end of the cable that is being used for the printer. 
If the data shows up on the terminal, the Hold Screen key works, and no 
data is lost, the problem is probably with the printer (an incorrect setting, for 
example). If the problem exists with the terminal, it might be caused by the 
cable, the hardware interface port, or a hardware port setting. 


13.10.2 Making Pending Jobs Eligible for Scheduling 


If a job does not execute when expected, the job might have a pending or holding 
status. The SHOW QUEUE/FULL/ALL_JOBS command displays the status for 
all jobs on a queue. 


If the job is in a holding status, see Section 13.9.6.3 for information about holding 
and releasing a job. 


If the job is in the pending state, the /FULL qualifier enables you to see the 
reason why the job is ineligible to execute. (Use a 132-character wide display to 
make sure that all the information is displayed.) 


For example: 


$ SHOW QUEVE/FULL/ALL JOBS/BY_JOB_STATUS=PENDING 


Generic printer queue REG$GENERIC 
/GENERIC=(REG$Q1,REG$Q2, REGSQ3 ) /OWNER=[ SYSTEM] /PROTECTION=(S:E,0:D,G:R,W:W) 


Entry Jobname Username Blocks Status 


684 PROBLEMS CHURCHILL 3118 Pending (check execution queues) 
Submitted 7-AUG-1994 17:49 /FORM=DEFAULT /NOTIFY /PRIORITY=100 
File: _$5$DUA174: [CHURCHILL] PROBLEMS . TXT; 2 


Printer queue REGSQ1, stopped, on LONDON::NPA1, mounted form DEFAULT 
/BASE_PRIORITY=4/DEFAULT=(FEED, FORM=DEFAULT) /OWNER=[SYSTEM] 
/PROTECTION=(S:E,0:D,G:R,W:W) 


Entry Jobname Username Blocks Status 


687 PMSSPEECH CHURCHILL 3558 Pending (queue stopped) 
Submitted 7-AUG-1994 17:51 /FORM=DEFAULT /NOTIFY /PRIORITY=100 
File: _$5$DUA174:[CHURCHILL]PMSSPEECH.TXT;1 (checkpointed) 


A job enters the pending status whenever the job is not eligible to execute. 
Table 13—7 lists common causes and solutions for a pending status. 
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Table 13-7 Common Causes and Solutions for Pending Job Status 


Problem 


The queue is currently processing as 
many jobs as it can. 


The queue is stopped or stalled. 


The stock of the print job’s form does not 
match the stock of the queue’s mounted 
form. 


The job was submitted or modified with 
characteristics not associated with the 
queue. 


The queue has a block limit set and the 
size of the print job does not fall within 
the specified range. 


The owner of the job does not have write 
access to the execution queue. 


The print job is in a logical queue that is 
assigned to a stopped execution queue. 


An output job requires an output device 
that is enabled for lowercase printing. 


Solution 


Wait until intervening jobs complete. 


If a SHOW QUEUE/FULL command shows 
the queue status as stopped or stalled, 
determine why the queue is stopped or stalled. 


If the queue is stopped, start it with the 
START/QUEUVE command. If the stopped 
queue is an autostart queue, use START 
/QUEUE to activate the queue and ENABLE 
AUTOSTART/QUEUES to start the queue. 


If the queue is stalled, follow the steps in 
Section 13.10.3. 


Perform the steps in Section 13.10.2.1. 


Perform the steps in Section 13.10.2.2. 


Use the SET ENTRY/REQUEUVE command 
to move the job to another queue, or use the 
SET QUEUE/[NO]JBLOCK_LIMIT command 
to change or remove the block limit on the 
queue. 


Use to SET ENTRY/REQUEUE command to 
move the job to another queue, or change 
the access to the queue as explained in 
Section 13.8.1. 


Use the SET ENTRY/REQUEUE command to 
requeue the job to another queue or start the 
execution queue to which the logical queue is 
assigned. 


If the printer supports lowercase printing, 
use the /LOWERCASE qualifier with the 
SET PRINTER or SET TERMINAL command 
to enable lowercase printing on the device. 
Otherwise, use the SET ENTRY/REQUEUE 
command to move the job to an execution 
queue that sends its output to a printer with 
lowercase printing enabled. 


13.10.2.1 Fixing Print Jobs That Are Pending Due to Stock Mismatch 


When monitoring jobs, you might see a print job that is pending in a queue 
because the stock does not match that of the mounted form. For example, you 
might see a SHOW ENTRY display similar to the following: 


13-80 


$ SHOW ENTRY 133/FULL 


Username 


RANDOM 


Entry Jobname 


133 SET 


Blocks Status 


74 Pending (stock type mismatch) 


On idle printer queue SUESPRINT 
Submitted 21-JUN-1994 16:14 /FORM=MANUAL (stock=HQ) /PRIORITY=100 
File: _S5$DUA1: [ RANDOM]SET.TXT;5 
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To fix jobs that are pending because of a stock mismatch, do one or more of the 
following: 


¢ Make the stocks match by mounting a different form on the queue (for 
example, using the SET QUEUE/FORM_MOUNTED command) or by 
specifying a different form with the job (for example, using the SET ENTRY 
/FORM command). 


¢ Move the job to a queue on which the stock of the mounted form matches 
the stock of the job’s form (for example, using the SET ENTRY/REQUEUE 
command). 


¢ Delete the job (for example, using the DELETE/ENTRY command). 


See Section 13.8.9 for more information about forms. 


13.10.2.2 Fixing Jobs That Are Pending Because of Characteristics Mismatch 


When monitoring jobs, you might see a batch or print job that is pending in a 
queue because the characteristics do not match those assigned to the queue. For 
example, you might see a SHOW ENTRY display similar to the following: 


$ SHOW ENTRY 882/FULL 


Entry Jobname Username Blocks Status 


882 SETHOST RANDOM 5 Pending (characteristics mismatch) 
On idle printer queue $PRINTER_1 
Submitted 28-AUG-1994 15:21 /CHAR=(5) /FORM=DEFAULT /PRIORITY=100 
File: _S5$DUA1: [RANDOM]SETHOST.LOG;5 


To fix jobs that are pending because of a characteristics mismatch, do one or more 
of the following: 


¢ Move the job to a queue on which the characteristics match those of the job 
(for example, using the SET ENTRY/REQUEUE command). 


¢ Delete the job (for example, using the DELETE/ENTRY command). 


e Make the characteristics match by assigning new characteristics to the queue 
(for example, using the SET QUEUE/CHARACTERISTIC command). 


See Section 13.8.3 for more information about characteristics. 


13.10.3 Fixing a Stalled Output Queue 


If an output queue is in the stalled state, the device on which the queue is 
running is malfunctioning. Check the device and fix the problem. Once the 
problem is fixed, the queue will leave the stalled state. 


If you cannot fix the problem immediately, stop the queue by entering the 
command STOP/QUEUE/RESET. While the queue is stopped, you might 

want to reroute the jobs in the queue to a functioning queue, as explained in 
Section 13.9.1.14. When the problem is fixed, deassign the logical queue and start 
the queue by entering the START/QUEUE command. 
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13.10.4 petennmning Why an Autostart Queue Will Not Start 


If you attempt to start an autostart queue with the ENABLE AUTOSTART 
/QUEUES command and the queue does not start, the queue might not be active 
for autostart. The ENABLE AUTOSTART/QUEUES command starts only active 
autostart queues capable of running on a node. To activate an autostart queue, 
you must include the /START qualifier with the INITIALIZE/QUEUE command 
or enter the START/QUEUE command. For example: 


$ ENABLE AUTOSTART/QUEUES/ON_ NODE=kaTY @ 

$ SHOW QUEUE KATY BATCH 

Batch queue KATY BATCH, stopped, autostart inactive, on KATY:: @ 

$ START/QUEUE KATY BATCH © 

$JBC-I-AUTONOTSTART, queue is autostart active, but is not started @ 
$ SHOW QUEUE KATY BATCH/ALL 

Batch queue KATY BATCH, stopped, autostart, on KATY:: 5) 


$ ENABLE AUTOSTART /QUEUES/ON _ NODE=KATY @ 
$ SHOW QUEUE KATY BATCH/ALL 


Batch queue KATY BATCH, idle, on KATY:: @ 


@ The ENABLE AUTOSTART/QUEUES command attempts to start autostart 
queues on node KATY. 


© The SHOW QUEUE display shows that the autostart batch queue KATY_ 
BATCH did not start. The display also reveals that the queue is inactive for 
autostart; the queue was either not activated initially or it was deactivated 
with a STOP/QUEUE/NEXT or STOP/QUEUE/RESET command. 


The START/QUEUVE command activates the queue for autostart. 


The informational message informs you that the queue is active for autostart 
but is not started. 


The SHOW QUEUE command also provides this information. 


Once the autostart queue is active, reentering the ENABLE AUTOSTART 
/QUEUES command starts the queue on node KATY. 


@ The SHOW QUEUE command informs you that the queue is started. 


oOo 8 90 


13.10.5 Solving Problems Deleting a Queue, Form, or Characteristic 
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If you are having problems deleting a queue, form, or characteristic, make sure 
you have met the following requirements: 


¢ When deleting a form or characteristic with the DELETE/FORM or DELETE 
/CHARACTERISTIC command, you must specify the name assigned to 
the form or characteristic. (The form or characteristic number cannot 
be used with the DELETE command.) To determine the name of a form 
or characteristic, enter the SHOW QUEUE/FORM or SHOW QUEUE 
/CHARACTERISTIC command. 


e A queue must be stopped before being deleted. 


e All references to a queue, form, or characteristic must be removed before you 
can delete the queue, form, or characteristic. 


If you see a message similar to the following, a reference to the queue, form, or 
characteristic still exists: 


$DELETE-E-NOTDELETED, error deleting object-name 
-JBC-E-REFERENCED, existing references prevent deletion 
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For example, the queue you are attempting to delete might be named as a target 
for a generic queue, or the form you are attempting to delete might be specified 
for a print job. All references to a queue, form, or characteristic must be removed 
before you can delete the queue, form, or characteristic. 


How to Perform This Task 


Perform the following steps to find and remove references to a queue, form, or 
characteristic: 


1. Enter the command SHOW QUEUE/FULL/ALL/OUTPUT=filename, where 
filename is a name of a file to which the display output of the command is to 
be sent. 


2. Use the SEARCH command to search the output file for the name of the form 
or queue, or the number of the characteristic to be deleted. The result of your 
search will include all references to the queue, form, or characteristic. . 


3. Ifthe SEARCH command reveals any queues with references to the queue, 
form, or characteristic you are trying to delete, perform the following steps: 


a. Use the STOP/QUEUE/NEXT command to stop each queue with an 
offending reference. 


b. Use the START/QUEUE command with the appropriate qualifiers to 
restart each queue without the reference. 


4. If the SEARCH command reveals any jobs with references to the queue, form, 
or characteristic you are trying to delete, perform one of the following steps to 
eliminate the job reference: 


e Wait for the job to complete. (You might want to raise the priority of 
the job as explained in Section 13.9.6.4, so the job will be scheduled for 
processing sooner.) 


¢ Delete the job as explained in Section 13.9.6.8. 


¢ Modify the options for the job as explained in Section 13.9.6.2, or ask the 
owner of the job to do so. 


Example 


The following example includes several commands used to fix problems 
preventing the deletion of a queue: 


$ @ DELETE/QUEUE JADE BATCH 

© %DELETE-E-NOTDELETED, error deleting JADE BATCH 
-JBC-E-QUENOTSTOP, queue must be stopped to perform operation 
$ © STOP/QUEUE/NEXT JADE_BATCH 

$ @ DELETE/QUEUE JADE BATCH 

© %DELETE-E-NOTDELETED, error deleting JADE BATCH 
-JBC-E-REFERENCED, existing references prevent deletion 

$ SHOW QUEUE/FULL 


@ Generic batch queue CLUSTER BATCH 
/GENERIC=(JADE_BATCH,RUBY_BATCH,OPAL BATCH) /OWNER=[SYSTEM] 
/PROTECTION=(S:E,0:D,G:R,W:W) 
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$ @ STOP/QUEUE/NEXT CLUSTER_BATCH 
$ © START/QUEUVE CLUSTER_BATCH/GENERIC=(RUBY BATCH, OPAL BATCH) 
$ © DELETE/QUEUE JADE BATCH 


The DELETE/QUEUE command attempts to delete the queue. 
The message indicates that the queue is not stopped. 


The STOP/QUEUE/NEXT command stops the queue after allowing the 
current job to complete. 


The DELETE/QUEUE command again attempts to delete the queue. 
This time, the message indicates that references to the queue exist. 


The SHOW QUEUE/FULL command shows information about all queues. 
However, the only reference to JADE_BATCH names the queue as a target 
queue for the generic queue CLUSTER_BATCH. 


@ The STOP/QUEUE/NEXT command stops the generic queue that targets 
JADE_BATCH. 


© The START/QUEUE command eliminates the reference to JADE_BATCH by 
restarting the generic queue without specifying JADE_BATCH as a target. 


© The DELETE/QUEUE command successfully deletes the queue. 
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13.10.6 Adding or Deleting a Device Control Library Module 
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When attempting to add or delete a device control library module, you might see 
the following message: 


SLIBRAR-F-OPENIN, error opening module-name 
-RMS-E-FLK, file currently locked by another user 


To add or delete a library module, you must stop all output queues to which the 
library is assigned. To determine which queues the library is assigned to, perform 
the following steps: 


1. Enter a command similar to the following, where filename is the name of a 
file to which the display output of the command is to be sent: 


SHOW QUEUE/FULL/OUTPUT=filename) 


2. Use the SEARCH command to search the output file for the name of the 
library. 


The result of your search will include all queues to which that library is assigned. 
Stop the queues and reenter the command to add or delete the library module. 


Note 


The SHOW QUEUE/FULL display shows the library assigned to a queue 
only if you explicitly assigned a library for the queue by including the 
/LIBRARY qualifier with the INITIALIZE/QUEUE or START/QUEUE 
command. If you do not explicitly assign a library to a queue, the default 
library, SYSDEVCTL, is used. 
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If the module you are trying to delete is in the default library, 
SYSDEVCTL, you must stop all queues for which the SHOW QUEUE 
/FULL command displays no library. To make sure the SYSDEVCTL 
library appears in the SHOW QUEUE/FULL display in the future, specify 
/LIBRARY=SYSDEVCTL when you restart the queue. 


If you cannot stop the queues immediately, perform the following steps: 


1. Use the COPY command to copy the library to be modified into your own 
directory. 


Add the module to the copy, or delete the module from the copy. 


Use the COPY command to copy the library back to the directory 
SYS$COMMON:[SYSLIB]. As long as you use the same name for the modified 
library, the library will be picked up by each queue when the queue is stopped 
and restarted. 


If your site has a large number of different printers, you can help prevent this 
problem by using more libraries, so that each library is assigned to fewer queues. 
For example, you should create and assign a different library for each type of 
printer, as explained in Section 13.9.5.2. 


13.10.7 Reporting Queue Problems to Digital 


If you encounter a problem with your queues, and you need to report it to Digital, 
please provide as much information as possible. Section 12.13 specifies the 
information that is most useful to Digital in diagnosing your queuing system 
problems. 
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10-53 
restoring shadow sets, Part I, 10-43 
save set, Part I, 10-22 
stores save-set filein MFD, Part I, A-8 
transferring information, Part I, 9-19 
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detecting media errors, Part I, 8-62 
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See Pending bad block log file 
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job, Part I, 13-43, 138-60 
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components, Part I, 12-1 
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with multiple system disk, Part I, 12-6 
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mounting disk for, Part I, 12-6 
queuing process, Part I, 13-2 
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starting in system startup, Part I, 5-11 
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allowing to complete before stopping a queue, 
Part I, 18-56 
changing scheduling priority, Part I, 13-72 
completing before using VMSINSTAL.COM, 
Part I, 3-4 
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deleting, Part I, 18-75 
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executing, Part I, 13-73 
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Batch jobs (cont’d) 
retaining in a queue, Part I, 138-74 
scheduling, Part I, 138-72 
status 
See Job status 
submitting at startup, Part I, 5-138 
Batch mode 
as execution mode for a startup procedure, 
Part I, 5-18 
Batch processing environment 
See also Batch jobs 
See also Batch queues 
generic queues in a VMScluster, Part I, 13-7 
on a standalone workstation, Part I, 13-5 
sample configurations, Part I, 18-4 to 13-7 
steps for setting up, Part I, 13-14 
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See also Batch processing environment 
allowing jobs to complete before stopping, Part 
I, 138-56 
commands for managing, Part I, 13-47 
creating, Part I, 18-15 
deleting, Part I, 13-58 
for memory constrained systems, Part I, 13-32 
on standalone workstations, Part I, 13-5 
optimizing for Sort/Merge utility, Part I, 18-32 
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13-20 
restricting access, Part I, 138-22 
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pausing, Part I, 13-54 
setting up for vector processing, Part I, 24~7 
starting, Part I, 18-15 
status, Part I, 13-51 
stopping, Part I, 13-55, 13-56 
before shutting down a node, Part I, 18-56 
Binding volumes into a volume set, Part I, 8-22 
BIOLM process limit, Part I, 6-38 
value for efficient backups, Part I, 10-9 
BITMAP.SYS file 
See Storage bit map file 
Blocks 
disk 
definition, Part I, 8-2 
Files—11 
definition, Part II, A-1 
tape 
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Boot block 
description, Part I, 4-17 
in index file, Part II, A-6 
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writing with Writeboot utility, Part I, 4-17 
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AXP, Part I, 4-18 
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15-5 
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hardware, Part I, 4-16 
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installing OpenVMS to use, Part I, 3-2 
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creation during system startup, Part I, 5-5 
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ACP system parameters, Part I, 8-41 
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characteristics on a queue, Part I, 13-59 
Capability 
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Captive accounts, Part I, 6-27 
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operating, Part I, 7-17 
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decks, Part I, 7-17 
CD-ROMs 
accessing ISO 9660-formatted, Part I, 8-33 
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characteristics of, Part I, 8-4 
data arrangement on, Part I, 8-5 
file structures, Part I, 8-4 
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Changing the system parameter file 

with SYSGEN, Part II, 14-33 

with SYSMAN, Part II, 14-27 
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compared to VMSKITBLD.COM command 
procedure, Part I, 2-27 
creating SATELLITE_PAGE.COM command 
procedure, Part IJ, 15-18 
use in adding a system to a VMScluster, Part 
I, 2-27 
CLUSTER_SERVER process 
creation during system startup, Part I, 5-5 
CLUSTER_SIZE attribute, Part I, 10-50 
Command formats 
for backups, Part I, 10-4 
for image backups, Part I, 10-29, 10-30 
for incremental backups, Part I, 10-32, 10-33 
for multiple backup output devices, Part I, 
10-23, 10-30, 10-31 
Command procedures 
executing in SYSMAN, Part I, 2-15 
executing with SYSMAN DO command, Part I, 
2-14 
for backups, Part I, 10-34 
for image backups, Part I, 10-34 
for incremental backups, Part I, 10-36 
for interactive backups, Part I, 10—37 
for MONITOR 
archiving recording and summary files, 
Part II, 17-30 
creating cluster summaries, Part IJ, 17-31 
creating summary file, Part IJ, 17-31 
generating clusterwide multifile summary 
reports, Part II, 17-31 
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Command procedures 
for MONITOR (cont’d) 
initiating continuous recording, Part II, 
17-32 
invoking SUBMON.COM from startup, 
Part II, 17-81 
MONITOR.COM, Part II, 17-31 
MONSUM.COM, Part II, 17-31 
rerecording monitoring, Part II, 17-30 
starting MONITOR.COM as a detached 
process, Part II, 17-81 
SUBMON.COM, Part II, 17-31 
for SHOW CLUSTER, Part I, 19-15 
controlling output, Part I, 19-5 
default file type, Part IJ, 19-16 
description, Part I, 19-16 
formatting reports, Part II, 19-10 
initialization, Part II, 19-14 
SHOW_CLUSTERSINIT.COM, Part II, 
19-14 
for system management (overview), Part I, 2-3 
for system startup, Part I, 2-9 
See also Startup command procedure 
login 
setting protection in, Part I, 9-7 
LOGIN.COM, Part I, 2-13 
setting up storage media, Part I, 8-44 
disk volumes, Part I, 8-44 
tape volumes, Part I, 8-45 
testing a spooled printer, Part I, 7-15 
to configure a DECnet network node, Part I, 
20-7 
to install software products 
See VMSINSTAL.COM command procedure 
to run AUTOGEN regularly, Part II, 14-22 
to specify default state of operator log files, 
Part IT, 17-14 
VVIEF$INSTAL.COM procedure, Part II, 24-5 
Commands 
See also DCL commands 
executing on multiple nodes, Part I, 2-14 
executing on remote nodes, Part I, 2-9 
executing with SYSMAN DO command, Part J, 
2-14 
Communicating 
with operators, Part I, 8-18 
with users, Part I, 8-18 
creating systemwide announcements, Part 
I, 5-138 
Communications line 
definition, Part I, 20-9 
network 
definition, Part II, 20-2 
Compact discs 
See CD-ROMs 
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Compare operations 
with BACKUP, Part I, 10-24 
Completion status 
showing for batch and print jobs, Part I, 13-28 
Compressing the Help Message database after 
deletions, Part I, 5-27 
Computer interconnect 


See CI 
Configuration database 
building manually using NCP, Part II, 20-7 
changing location of file, Part IT, 20-7 
contents, Part II, 20-7 
modifying using NCP, Part II, 20-7 
permanent database, Part II, 20-7 
stored in SYS$SYSTEM:NETNODE_ 
REMOTE.DAT file, Part II, 20-7 
volatile database, Part I, 20-7 
Configurations 
network 
DECnet support, Part II, 20-4 
local area LAN, Part II, 20-4 
multiple-area, Part II, 20-4 
single-area, Part II, 20-4 
queue 
sample batch queuing system, Part I, 138-4 
to 13-7 
sample print queuing system, Part I, 13-8 
to 138-14 
CONFIGURATION SET command 
in SYSMAN, Part II, 19-16 
CONFIGURATION SHOW command 
in SYSMAN, Part II, 19-16 
CONFIGURE phase of system startup, Part J, 
5-4, 5-17, 7-8 
definition, Part I, 7-5 
CONFIGURE process 
starting, Part I, 5-4 
Configuring DECnet, Part II, 20-5 
configuration database, Part II, 20-7 
nodes 
automatic, Part II, 20-9 
manual, Part II, 20-9 
planning network, Part IJ, 20-9 
Configuring devices 
HSC 
disabling during system startup, Part J, 
7-8 . 
in system startup, Part I, 7-5 
in system startup, Part I, 5-7, 7-5 
CONINTERR.EXE driver, Part I, 7-7 
CONNECT command 
See also IO CONNECT command . 
in SYSGEN (VAX), Part I, 7-6 
for connecting the console device, Part J, 
7-6 
in system startup, Part I, 5-7 


Connecting devices 
automatically, Part I, 7-5, 7-7 
in system startup, Part I, 5-4 
manually 
in system startup, Part I, 5-7 
on AXP, Part I, 7-7 
on VAX, Part I, 7-6 
the network communications device 
on AXP, Part I, 7-7 
on VAX, Part I, 7-7 
virtual terminals, Part I, 7-10 
CONSCOPY.COM command procedure, Part I, 
5-33 
Console storage device 
building standalone BACKUP on, Part I, 5-33 
connecting (VAX), Part I, 7-6 
copying, Part I, 5-33 
use in booting, Part I, 4-2 
Console terminals, Part I, 2-18, 2-20, 8-18 


message 
indicating lack of installed page file, Part 
IT, 5-5 
indicating site-independent startup, Part J, 
4—5 


indicating site-specific startup, Part I, 4-5 
login welcome, Part I, 2—7 
Console volumes 
copying files to and from, Part I, 9-24 


CONTIN.SYS file 
See Continuation file 
Continuation file 
CONTIN.SYS, Part II, A-9 
reserved file, Part II, A-9 
used as extension file identifier, Part IJ, A-9 
Continuation volumes 
in volume set, Part I, 8-38 
mounting in tape volume sets, Part I, 8-36 
CONTINUE command 
in conversational boot, Part I, 4-6 
Control 
access 
for files, Part I, 9-6 
Conversational boot 
booting with an alternate system parameter 
file, Part I, 4-6 
booting with minimum startup, Part I, 4-13 
changing system parameters, Part I, 4-6; Part 
IT, 14-86 
CONTINUE command, Part I, 4—6 
location of computer-specific instructions, Part 
I, 4-4 
performing, Part I, 4-3 
SET command, Part I, 4-6 
SET/STARTUP command, Part I, 4—12 
SHOW command, Part I, 4-6 
showing system parameters, Part I, 4-6; Part 
II, 14-86 
SHOW/STARTUP command, Part I, 4—12 


Conversational boot (cont'd) 
specifying an alternate startup command 
procedure, Part I, 4-12 
SYSBOOT prompt, Part I, 4-3 
tasks allowed in, Part I, 4-3 
USE command, Part I, 4-7 
uses of, Part I, 4~3 
Convert utility (CONVERT) 
saving the queue database, Part I, 12-11 
using to change organization of file, Part J, 
9-19 
Coordinated Universal Time (UTC) service 
See UTC 
COPY command, Part I, 10-22 
comparison with COPY command in System 
Dump Analyzer utility, Part IT, 15-13 
disk volumes, Part I, 9-20 
in System Dump Analyzer utility, Part II, 


15-4, 15-13 

restriction for copying dump files, Part IJ, 
15-13 

sending message after file is copied, Part J, 
9-23 


standard-labeled volumes 
copying from, Part I, 9-20 
tape volumes 
copying files from, Part I, 9-22 
copying files to, Part I, 9-20, 9-22 
transferring information, Part I, 9-19, 9-20 
Copying directories 
with BACKUP, Part I, 10—22 
Copying files 
COPY command, Part I, 9-20 
dump files, Part II, 15-12 
from disk volumes, Part I, 9-20 
from tape volumes, Part I, 9-20 
methods for, Part I, 9-19 
to disk volumes, Part I, 9-20 
to tape volumes, Part I, 9-22 
using Exchange utility, Part I, 9-24 
with BACKUP, Part I, 10-22 
Core image file 
CORIMG.SYS, Part I, A-9 
not supported by OpenVMS, Part II, A-9 
CORIMG.SYS file 
See Core image file 
Counters 
status of LAT node, Part I, 22—7 
CPUDEFAULT process limit 
choosing a value for batch queues, Part I, 
13-32 
specifying a value for batch queues, Part J, 
13-19, 13-29 
CPU ID (CPU identification number), Part II, 
24-2 
CPUMAXIMUM process limit 
choosing a value for batch queues, Part J, 
13-32 


J) 
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CPUMAXIMUM process limit (contd) 
specifying a value for batch queues, Part I, 
13-19, 18-29 
CPUTIME process limit, Part I, 6-38 
CRASH.COM command procedure, Part I, 4-27 
Crash dumps, Part IT, 15-2 


See also System dump files 


See also System failures 
comparison of physical and selective, Part I, 
15-3 
freeing page file of, Part IT, 15-14 
physical, Part II, 15-3 
releasing, Part II, 15-14 
requirements for saving, Part II, 15-3 
saving contents of page file on reboot, Part II, 
15-2 
saving contents of system dump file on reboot, 
Part I, 5-12 
selective, Part II, 15-3 
Crash Log Utility Extractor (CLUE) 
description, Part II, 15-11 
CREATE command 
creating directories, Part I, 9-21 
limiting number of file versions, Part IJ, 
8-51 
in SYSGEN 
changing page, swap, and dump file sizes, 
Part II, 15-24 
creating page, swap, and dump files, Part 
IT, 15-16 
writing new file to tape volume, Part I, 9-19 
CREATE/DIRECTORY command 
to specify UIC-based directory protection, Part 
I, 9-13 
Creating an additional queue manager, Part I, 
12-10 
Creating a new system parameter file 
with SYSGEN, Part II, 14-35 
Creating a queue database, Part I, 12-7 
Creating execution queues, Part I, 138-15 
autostart, Part I, 18-15, 13-16 
nonautostart, Part I, 13-16 
Creating generic queues, Part I, 138-17 
Creating log files 
operator log file, Part IJ, 17-13 
Creating page, swap, and dump files 
with AUTOGEN, Part II, 15-15, 15-22 
with SYSGEN, Part II, 15-16 
Creating search path of Help Message database 
files, Part I, 5-24 
Current accounting file 
controlling which resources are tracked in, 
Part IT, 18-3 
default file name, Part II, 18-3 
definition, Part IT, 18-1 
finding out what resources are tracked in, Part 
II, 18-2 
moving, Part II, 18-3 
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Current accounting file (cont’d) 
starting up a new version of, Part I, 18-3 
Current system parameters, Part II, 14-3, 14-26 
Customizing the system 
adding optional system files that have been 
removed from the system disk, Part I, 5-1 
backing up the console storage device, Part I, 
5-33 
backing up the system disk, Part I, 5-33 
building standalone BACKUP, Part I, 5-33 
creating site-specific startup command 
procedures, Part I, 5-2 
creating systemwide announcements, Part I, 
5-13 
duplicating the system disk, Part I, 2-23 
enabling autostart, Part I, 5-11 
installing known images, Part I, 5-12 
installing resident images (AXP), Part I, 5-12 
limiting the number of interactive users, Part 
I, 5-15 
making remote InfoServer devices available, 
Part II, 21-13 
making remote InfoServer disks available, Part 
I, 5-12 
modifying login procedures, Part I, 5-16 
modifying site-specific startup command 
procedures, Part I, 5-2 
rules, Part I, 5-3 
SYCONFIG.COM, Part I, 5-7 
SYLOGICALS.COM, Part I, 5-7 
SYPAGSWPFILES.COM, Part I, 5-5 
SYSECURITY.COM, Part I, 5-9 
SYSTARTUP_VMS.COM, Part I, 5-9 
removing optional system files from the system 
disk, Part I, 5-1 
setting up a LAT network, Part I, 5-14 
starting InfoServer Client for Spee: Part 
I, 5-12; Part II, 21-10 
starting queues, Part I, 5-11 
starting the DECnet network, Part I, 5-15 
submitting batch jobs at system startup, Part 
I, 5-138 
Cylinders 
definition, Part IT, A-2 


D 


DAD virtual disk unit, Part I, 21-12 
Databases 
configuration 
See Configuration database 
LAT database, Part IJ, 22-7 
LMF 
use in system startup, Part J, 5-5 
network 
permanent, Part II, 20-8 
volatile, Part II, 20-8 
queue 


Databases 
queue (cont’d) 
See Queue database 
startup 
definition, Part I, 5-17 
layered product, Part I, 5-17, 5-18 
OpenVMS, Part I, 5-17 
order of startup events, Part I, 5-4 
Data blocks 
partially recorded 
ISO 9660 standard, Part I, 8-5 
Data card deck, Part I, 7-18 
Data interleaving 
ISO 9660, Part I, 8-6 
Data loss 
avoiding by dismounting volume, Part I, 8-42 
Daylight saving time 
changing your time differential factor (TDF) for, 
Part I, 5-30 
DAYLIGHT_SAVINGS.COM command procedure, 
Part I, 5-80 
DBBF (detected bad block file), Part I, 8-62 
DCL commands 
accessing disk and tape files, Part I, 9-13 
executing with SYSMAN DO command, Part I, 
2-14 
file manipulation, Part I, 9-1 
for system management (overview), Part I, 2—2 
retrieving file information, Part I, 9-2 
with DO command in SYSMAN, Part I, 19-18 
DDCMP (DIGITAL Data Communications Message 
Protocol) 
for multipoint connections, Part IT, 20-7 
for point-to-point connections, Part II, 20-7 
ddcu format 
for device names, Part I, 7-1 
DEALLOCATE command, Part I, 8-10 
tape, Part I, 9-23 
Deallocating devices, Part I, 8-10 
DECdtm services 
and managing transaction logs, Part II, 23-1 
disabling, Part II, 23-19 
enabling, Part IJ, 23-19 
DECnet 
See also Networks 
adaptive routing, Part IL, 20-3 
advantages, Part II, 20-1 
asynchronous 
using virtual terminals, Part I, 7-10, 7-11 
circuit 
definition, Part IT, 20-2 
communications line 
definition, Part II, 20-2 
configuration 
automatic, Part II, 20-9 
manual, Part II, 20-9 
on an OpenVMS system, Part II, 20-5 
with bridge, Part II, 20-5 


DECnet (cont'd) 
configuration database, Part II, 20-7 
connecting with communications line, Part II, 
20-9 
definition, Part IT, 20-2 
end node, Part II, 20-4 
establishing node in network, Part II, 20-8 
Ethernet, Part II, 20-2 
Event Logging facility 
to monitor network events, Part II, 20-12 
license, Part IT, 20-9 
local area network (LAN) connections, Part II, 
20-6 
logical link 
definition, Part I, 20-2 
managing a network node, Part II, 20-10 
providing host services, Part I, 20-10 
multiple-area network, Part II, 20-4 
network configurations, Part IT, 20-4 
network connections, Part IJ, 20-6 
network interface for OpenVMS, Part I, 20-5 
network monitoring, Part IT, 20-10 
See also Networks, monitoring 
tools, Part II, 20-10 
DTR/DTS, Part II, 20-12 
Monitor utility, Part IT, 20-12 
NCP Ethernet configurator, Part IJ, 
20-12 
node definition, Part II, 20-2 
object definition, Part II, 20-2 
PAK, Pari II, 20-9 
planning configuration, Part II, 20-9 
preparing system, Part IJ, 20-9 
router node, Part II, 20-3 
routing 
definition, Part IJ, 20-3 
levels of, Part II, 20-3 
security, Part II, 20-9 
controlling access to node, Part II, 20-9 
protecting files, Part IJ, 20-9 
using proxy accounts, Part II, 20-9 
shutting down for software installation, Part I, 
3-5 
specifying MAIL addresses, Part I, 6-35 
terminology, Part I, 20-2 
testing network, Part II, 20-13 
using to manage remote nodes, Part I, 2-9 
using with EXCHANGE/NETWORK, Part I, 
9-24 
verifying connection to the network, Part II, 
20-9 
WAN (wide area network) connections, Part II, 
20-7 
with VMScluster systema, Part II, 20-4 
worldwide connections, Part II, 20—7 
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DECnet Test Receiver/DECnet Test Sender utility 
(DTR/DTS) 
network monitoring tool, Part IJ, 20-12 
DECwindows 
use of Snapshot facility with, Part I, 4-22 
Deductible resource, Part I, 6-2 
DEFAULT account 
in UAF, Part I, 6-8 
Default boot procedure, Part I, 4-2 
Default devices 
resetting in SYSMAN, Part I, 2-14 
Default directories, Part I, 6-13 
resetting in SYSMAN, Part I, 2-14 
Default form, Part J, 18-64 
DEFAULT form, Part I, 13-63 
Default protection, Part I, 9-7 
Default system parameters 
booting with, Part I, 4-7 
DEFINE/CHARACTERISTIC command, Part I, 
13-58 
DEFINE command 
NCP, Part ITI, 20-8 
DEFINE/FORM command, Part I, 13-62 
for controlling line overflow, Part I, 18-45 
Defining a form, Part I, 13-62 
Defragmenting disks, Part I, 10-44 
Delete 
access 
for files, Part I, 9-6 
DELETE/CHARACTERISTIC command, Part I, 
138-60 
DELETE/ENTRY command, Part I, 138-81 
DELETE/FORM command, Part I, 13-65 
DELETE/QUEUE command, Part J, 13-58 
Deleting 
Digital messages from the Help Message 
database, Part I, 5-26 
files from the system disk, Part I, 5-1 
forms, Part I, 13-65 
problems with, Part I, 13-82 
jobs, Part I, 18-75 
page, swap, and dump files 
after creating new version, Part II, 15-25 
caution, Part II, 15-19 
queue characteristics, Part I, 13-60 
problems with, Part I, 138-82 
queues, Part I, 18-58 
problems with, Part I, 18-82 
DESELECT command 
in SHOW CLUSTER, Part II, 19-13 
Despooling a spooled printer, Part I, 7-15 
Destination parameter 
in VMSINSTAL.COM, Part I, 3-10 
Detected bad block file(DBBF), Part I, 8-62 
Device control libraries, Part J, 13-45 to 183-46 


See also Device control modules 
assigning to a queue, Part I, 13-67 
order of module output, Part I, 13-46 
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Device control libraries (cont'd) 
procedure for using, Part I, 18-65 
sample commands, Fart I, 13-68 
setting up, Part J, 13-45 
Device control modules 
See also Device control libraries 
adding, Part I, 138-66, 18-84 
creating, Part I, 18-66 
creating a form for, Part I, 18-67 
deleting, Part I, 13-66, 13-84 
forms, Part I, 138-65 
inserting into a library, Part I, 18-66 
listing, Part I, 18-67 
naming, Part I, 13-67 
order of output, Part I, 183-46 
page setup, Part I, 13-45, 13-67 
requesting with PRINT command, Part I, 
13-68 
reset, Part I, 13-68 
when queue is started, Part I, 138-68 
sample commands, Part I, 13-68 
setting up, Part I, 13-65 
setup, Part I, 13-45, 13-67 
specifying, Part I, 18-46, 18-65 
storing, Part I, 138-67 
troubleshooting, Part I, 138-84 
types, Part I, 18-45 
with forms, Part I, 18-46 
Device drivers 
CONINTERR.EXE, Part I, 7-7 
for event handling, Part I, 7-7 
loading 
automatically, Part I, 7-5 
in system startup, Part I, 5-4, 5-7 
manually (AXP), Part I, 7-7 
manually (VAX), Part I, 7-6 
not associated with a specific device, Part I, 
7-7 
TTDRIVER, Part I, 7-10 
Device names, Part I, 7-1 
for virtual terminals, Part I, 7-10 
in a VMScluster environment, Part I, 7-1 
DEVICE phase of system startup, Part I, 5-4, 
5-17 
Devices 
accessing in batch job, Part I, 8-45 
allocating, Part I, 8-9, 9-22 
availability 
OPCOM message, Part I, 8-57 
configuring 
in system startup, Part I, 5-7, 7-5 
manually, Part I, 5-7, 7-6 
special devices (AXP), Part I, 7-7 
special devices (VAX), Part I, 7-6 
determining available, Part I, 7-2 
Ethernet adapter 
specifying number for AUTOGEN, Part II, 
14—21 


Devices (cont’d) 
getting information about, Part I, 7-2, 7-15 
ISO-9660 
getting information about, Part I, 7-4 
LTAn, Part I, 7-10 
magnetic tape 
See Magnetic tapes 
managing, Part I, 7-1 
manually configuring non-standard devices, 
Part I, 5-7, 7-6 
mounting volumes, Part I, 8-18 
network communications 
connecting (AXP), Part I, 7-7 
connecting (VAX), Part I, 7-7 
not recognized by the system, Part I, 7-6 
OPAO:, Part I, 2-20 
printers 
See Printers 
protecting, Part I, 7-5 
requiring manual connecting (AXP), Part I, 7-7 
requiring manual connecting (VAX), Part I, 7-6 
RTAn, Part I, 7-10 
setting characteristics, Part I, 13-14 
in system startup, Part I, 18-14 
special 
connecting (AXP), Part I, 7-7 
connecting (VAX), Part I, 7-6 
spooled, Part I, 18-14 
status report on, Part II, 17-8 
suppressing autoconfiguration during system 
startup, Part I, 5-7, 7-8 
terminals 
See Terminals 
Device unavailable queue status, Part I, 13-52 
Dialup identifiers, Part I, 11-10 
DIBOL 
starting the message manager, Part I, 5-15 
DIGITAL Data Communications Message Protocol 
See DDCMP 
Digital System Identifier (DSI 
ISO 9660 media protection, Part I, 8-17 
mount option, Part I, 8-17 
DIOLM process limit, Part I, 6-38 
value for efficient backups, Part I, 10-9 
Direct I/O count process limit, Part I, 6-38 
Direct mode 
as execution mode for a startup procedure, 
Part I, 5-18 
Directories 
backing up, Part I, 10-23 
backlink, Part I, 8-54 
copying with BACKUP, Part I, 10-22 
creating, Part I, 9-21 
destination 
specifying in VMSINSTAL.COM, Part I, 
3-10 
for an interactive account, Part I, 6-13 


Directories (cont'd) 
modifying characteristics, Part I, 9-13 
protecting, Part I, 9-12, 9-13 
specifying or changing ACLs, Part I, 9-13 
temporary working 
in VMSINSTAL.COM, Part I, 3-12 
DIRECTORY command, Part I, 9-5 
checking number of user’s disk blocks, Part I, 
8-47 
retrieving file information, Part I, 9-2 
showing full information, Part I, 9-17 
to obtain product list, Part I, 3-8 
with tapes, Part I, 9-17, 9-20 
Directory trees 
copying, Part I, 10-22 
DISABLE AUTOSTART/QUEUES command, Part 
I, 18-55, 138-56 
entering before shutting down a system, Part 
I, 13-56 
relationship to STOP/QUEUES/ON_NODE 
command, Part I, 138-56 
Disabling autostart, Part I, 12-9, 18-55 
before shutting down a node, Part I, 13-56 
Disabling operator terminals, Part I, 2-21 
Disabling spooling, Part I, 7-15 
Disabling user accounts, Part I, 6-25 
Disk files 
accessing at file level, Part I, 9-13 
assigning an alias, Part I, 9-10 
copying 
from disk volumes, Part I, 9-20 
to tapes, Part I, 9-22 
using COPY command, Part I, 9-19 
modifying characteristics, Part I, 9-9, 9-10 
DISKQUOTA commands, Part I, 2-9 
See also Disk Quota utility 
DISKQUOTA/DISABLE command, Part J, 8-50 
DISKQUOTA/ENABLE command, Part I, 8-50 
Disk quotas, Part I, 6-13 
definition, Part I, 8-47 
disabling, Part I, 8-51 
displaying, Part I, 8-47 
ensuring accuracy with rebuild operation, Part 
I, 8-48 
establishing, Part I, 8-48, 8-49 
example, Part I, 6-31 
exceeding, Part I, 8-48 
file, Part I, 8-47 
operation, Part I, 8-48 
retrieving information, Part I, 8-50 
suspending operations, Part I, 8-50 
Disk Quota utility (DISKQUOTA), Part I, 8-48 
Disks 
See also Disk commands 
See also Disk files 
See also Disk quotas 


See also Disk volumes 
See also System disks 
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Disks (cont’d) 


allocating drives, Part I, 8-9 
allocating space on, Part I, 8-50 
backing up active, Part I, 10-53 
basic concepts, Part I, 8-2 
block 

definition, Part I, 8-2 

grouped into cluster, Part IJ, A-1 
cluster, Part II, A-1 

definition, Part I, 8-2 
concepts, Part II, A-1 
cylinder 

definition, Part IJ, A-2 
deallocating drives, Part I, 8-10 
default format, Part I, 9-20 
definition, Part I, 8-2 
dismounting, Part J, 10-15 
extent 

definition, Part I, 8-2 
extents, Part I, A-1 
file identification, Part IJ, A-4 
files 

See Disk files 
Files—11 

directory hierarchy, Part IJ, A—4 
fragmentation of, Part I, 10-44; Part I, 15-24 
I/O performance, Part II, 16-8 
initializing, Part I, 10-13 
mounting, Part I, 8-28, 10-14 
organization 

logical, Part I, A-1 

physical, Part II, A~2 
protecting, Part I, 8-14, 8-16 
space 

See Disk space 


structure 

See Disk structure 
system 

See System disks 
track 

definition, Part II, A-2 
usage, Part I, 8-47 

creating file, Part I, 8-56 

UICs kept in quota file, Part IJ, A-9 
volume 

definition, Part I, 8-2 
volume sets 

definition, Part I, 8-2 


Disk space 


See also Disk quotas 
allocation by cluster, Part II, A-1 
managing, Part I, 8-46 to 8-53 
purging files, Part I, 8-51 
saving, Part I, 8-51 
by moving page and swap files off the 
system disk, Part II, 15-5 
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Disk space 


saving (cont’d) 
by purging the operator log file, Part I, 
5-13 
by removing optional system files, Part I, 
5-1 
by storing minimal dump information, 
Part IT, 15-10 
by using a selective dump, Part II, 15-3 
tracking use of, Part II, 18-6 


Disk storage server, Part II, 21—10 
Disk structure 


analyzing errors, Part I, 8-53 
Files—11, Part II, A-8 

repairing errors, Part I, 8-55 
reporting errors, Part I, 8-55 


Disk volumes 


accessing files on, Part I, 9-13 
access to public, Part I, 8-8 
adding to an existing set, Part I, 8-338 
adding volumes to volume sets, Part I, 8-33 
analyzing disk structure errors, Part I, 8-53 
analyzing media errors, Part I, 8-62 
assigning logical name, Part J, 5-10 
assigning volume label, Part J, 5-10 
binding into volume sets, Part I, 8-29 
characteristics 
modifying, Part I, 8-29 
console, Part I, 9-24 
copying files from, Part I, 9-20 
copying files to and from foreign volumes, Part 
I, 9-24 
copying files to tape volumes, Part I, 9-22 
creating Files—11 structure, Part J, 8-11 
creating volume sets from, Part IJ, 8-31 
definition, Part I, 8-2; Part I, A-1 
disk quota operations, Part I, 8—48 
dismounting, Part I, 8-41 
file expiration dates 
setting, Part I, 8-52 
file-structured, Part I, 8-20 
foreign, Part I, 8-20 
handling error conditions, Part I, 8-53 
initializing, Part I, 8-11; Part II, A-1 
guidelines, Part I, 8-13 
load balancing, Part I, 8-9 
modifying characteristics, Part I, 8-29 
mounting, Part I, 8-21, 8-27 
for page and swap files, Part II, 15-18 
for queue database files, Part I, 12-6 
in system startup, Part I, 5-10 
early, Part J, 5-11 
for page and swap files, Part I, 5-5 
InfoServer, Part II, 21-13 
MOUNT/YASSIST command, Part I, 
5-11 
special consideration about operator 
assistance, Part I, 5-11 


Disk volumes (cont’d) 
mount verification, Part I, 8-56 
performance, Part I, 8-28 
physical loading, Part I, 8-21 
private, Part I, 8-9 
protecting, Part I, 8-14 
public 
See Public volumes 
reading files from, Part I, 9-14 
rebuilding, Part I, 8-48 
removing before dismounting, Part J, 8-41 
space 
conserving, Part I, 8-46 
verification, Part I, 8-56 
write-locked 
dismounting, Part I, 8-41 
write-locking, Part I, 8-58 
writing files to, Part I, 9-20 
DISMOUNT command, Part I, 8-40 


See also Dismounting 
canceling mount verification, Part I, 8-60 
dismounting single volume in volume set, Part 
I, 8-43 
for a single tape volume, Part I, 8-42 
for foreign volumes, Part I, 8-43 
overriding automatic unloading of volume, Part 
I, 8-48 
tape, Part I, 9-23 
Dismounting 
See also DISMOUNT command 
a backup volume, Part I, 10-15 
conditions preventing, Part I, 8-41 
foreign volumes, Part I, 8-43 
volumes, Part I, 8—40, 8—44 
volume sets, Part I, 8-43 
with open files, Part I, 8-41 
Displaying 
a form assigned to a queue, Part I, 13-64 
characteristics assigned to a queue, Part J, 
13-59 
defined characteristics, Part I, 13-59 
defined forms, Part I, 138-63 
information about queues, Part I, 18-50 
information about the queue manager, Part I, 
12-11 
system parameters 
See Showing system parameters 
Distributed Queuing System (DQS) 
distributed printing, Part I, 13-13 
Distributing system work load, Part II, 16-3 
Distribution kit 
startup files included on, Part J, 5-2 
DO command 
for managing a VMScluster system, Part II, 
19-18 
in SYSMAN, Part J, 2-14 


DOS~—11 tape volumes 
file transfers with, Part I, 9-24 
format conversions for, Part I, 9-24 
Downline loading, Part II, 21-2 
DQS 
See Distributed Queuing System 
Drivers 
See Device drivers 
DSA device naming, Part I, 7-1 
DSI 
See Digital System Identifier 
DSI keyword 
with MOUNT/PROTECTION command, Part I, 
8-23 
DTR/DTS 
See DECnet Test Receiver/DECnet Test Sender 
utility 
Dual-architecture VMSclusters 
installing images, Part IT, 19-19 
example, Part I, 19-19 
DUMPBUG system parameter, Part II, 15-3 
Dump files 
changing sizes 
with SWAPFILES.COM, Part II, 15-23 
system 
See System dump files 
DUMPFILE symbol, Part I, 15-21 
DUMPSTYLE system parameter, Part II, 15-3, 
15-7, 15-10 
Dynamic load leveling, Part I, 24-2 
Dynamic system parameters, Part II, 14-2, 14-3 
See also System parameters 


E 


EDIT/ACL command 
to specify or change directory ACL, Part I, 
9-13 
EDIT keypad function, Part II, 19-7 
Emergency system shutdown 
with CRASH, Part I, 4-27 
with OPCCRASH, Part I, 4—27, 4-36 
Emergency system startup 
with default system parameters, Part I, 4-7 
without startup and login procedures, Part I, 
4-8 
without the UAF, Part I, 4-9 
ENABLE AUTOSTART/QUEUES command, Part 
I, 18-18, 138-49 
in startup command procedure, Part I, 13-16 
recommended use, Part I, 13-18 
Enabling autostart, Part J, 13-4, 18-18, 13-49 
in startup command procedure, Part I, 13-16 
End nodes 
network, Part II, 20—4 
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END phase 
of system startup, Part I, 5-18 
ENQLM process limit, Part I, 6-38 
Enqueue quota process limit, Part I, 6-38 
EOT markers, Part I, 8-6 
continuing to copy after, Part I, 9-24 
ERLBUFFERPAGES system parameter, Part II, 
15-6 
ERRFMT process, Part II, 17-2 
See also Error log files 
See also Error logging 
See also Error Log utility 
creation during system startup, Part J, 5-5 
restarting, Part II, 17-4 
writes to ERRLOG.SYS file, Part I, 17-2 
Error checking 
in SYSTARTUP_VMS.COM, Part I, 5-10 
in system parameter files, Part II, 14-19 
ERRORLOGBUFFERS system parameter, Part 
IT, 15-6 
Error log files 
created by ERRFMT process, Part II, 17-2 
events reported in, Part II, 17-38 
logical name defining location, Part I, 5-8 
maintaining, Part II, 17-4 
moving to reduce system disk I/O, Part II, 16-8 
overview, Part II, 17-3 
producing full report, Part II, 17-5 
SYSPRV privilege to access, Part II, 17-5 
Error logging 
See also ERRFMT 
See also Error log files 
See also Error Log utility 
automatic reporting, Part II, 17-3 
buffers used, Part II, 17-2 
ERRFMT process, Part II, 17-2 
executive routines to detect errors, Part II, 
17-2 
facility 
parts of, Part II, 17-2 
producing full report, Part II, 17-5 
reports produced, Part II, 17-2 
using the Error Log utility, Part II, 17-2 
Error Log Report Formatter (ERF), Part I, 17-2 
Error log reports 
See Error Log utility, reports 
Error Log utility (ERROR LOG) 
See also ERRFMT 
See also Error log files 
See also Error logging 
ANALYZE/ERROR_LOG command, Part I, 
17-5 
description, Part II, 17-8 
overview, Part II, 17-3 
producing full report, Part II, 17-5 
reporting on error log file, Part I, 17-5 
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Error Log utility (ERROR LOG) (cont'd) 


reports 
excluding unknown entries, Part II, 17-7 
formats, Part II, 17-6 
printing, Part I, 17-5 
privileges required, Part II, 17-5 
specifying display device, Part II, 17-6 
specifying events and times, Part I, 17-7 
types of, Part II, 17-3 
uses, Part II, 17-8 
Error messages 
See Help Message utility 
See Messages 
Error options 
for fatal BACKUP errors, Part I, 10-54 
Errors 
analyzing disk structure, Part I, 8-53 
analyzing error reports, Part II, 17-2 
analyzing media, Part I, 8-62 
disk read 
if returned when booting, Part I, 4-16 
disk structure 
repairing, Part I, 8-55 
reporting, Part I, 8-55 
error log file, Part II, 17-2 
error logging facility, Part I, 17-2 
handling on disk volumes, Part I, 8-53 
machine check 
if returned when booting, Part I, 4-16 
mounting disk, Part I, 8-22 
ESS$LASTDRIVER device driver, Part II, 21-8, 
21-12 
controlling and diagnosing, Part I, 21-8, 
21-10 
ESS$STARTUP.COM command procedure, Part 
IT, 21-10, 21-12 
invoking in system startup, Part II, 21-10 
Ethernet 
adapters 
specifying number of in MODPARAMS.DAT 
file, Part II, 14-21 
configurator 
network monitoring tool, Part II, 20-12 
connecting, Part II, 20-5 
definition, Part I, 20-2 
in local area network, Part II, 20-6 
linking with bridge, Part II, 20-5 
Event classes 
displaying those being audited, Part II, 17-17 
Event handling 
device driver used in, Part I, 7-7 
EXCHANGE/NETWORK command 
using to transfer files, Part I, 9-19, 9-24 
Exchange utility (EXCHANGE) 
using to copy files, Part I, 9-19 
using to transfer information, Part I, 9-24 


Executable images, Part I, 16-9, 16-138 
Execute 
access 
for files, Part I, 9-6 
Execute-only images, Part II, 16-14 
Execute procedure (@) command, Part II, 19-16 
Executing job status, Part I, 13-69, 13-75 
Execution mode 
startup procedures, Part I, 5-18 
BATCH, Part I, 5-18 
changing, Part I, 5-20 
DIRECT, Part I, 5-18 
SPAWN, Part I, 5-18 
specifying, Part I, 5-19 
Execution queues 
activating 
autostart, Part I, 138-4 
activating an autostart, Part I, 13-15, 18-50 
creating, Part I, 18-15 
relationship to generic queues, Part I, 13-2 
starting 
autostart, Part I, 13-4, 138-18, 13-49 
in system startup, Part J, 5-11 
nonautostart, Part I, 18-16, 13-18, 13-49 
Executive mode 
calling images running in, Part I, 16-10, 
16-14 
logical names, Part II, 16-14 
recommended use for logical names, Part I, 5-8 
Expiration date, Part I, 6-39 
field, Part I, 9-14 
checking, Part I, 9-18 
file, Part I, 8-52 
tape file system checks, Part I, 9-18 
Expiration time, Part I, 6-39 
Extended attribute records 
See XARs 
Extensions 
file 
See File extensions 
Extension size 
See File extensions 
Extents 
definition, Part I, A-1 
disk 
definition, Part I, 8-2 
index file 
description, Part IJ, A—-7 


F 


F$GETJPI lexical function 
getting information about vector processing, 
Part II, 24-9 
F$GETQUI lexical function, Part I, 18-52 


F$GETSYI lexical function 
getting information about vector processing, 
Part IT, 24-9 
Failover 
of queues, Part I, 13-15 
Failover list 
for an autostart queue 
specifying, Part I, 13-15 
for queue manager, Part I, 12-3, 12-9 
insufficient, Part I, 12-16 
specifying, Part I, 12-9 
Failovers 
See also Failover list 
of queue manager, Part I, 12-3, 12-16 
forcing, Part I, 12-9 
of queues, Part I, 13-4 
FDDI (Fiber Distributed Data Interface) 
multiaccess communications channel, Part I, 
20-6 
supports VAXcluster technology, Part II, 20-6 
Feedback 
See AUTOGEN feedback 
Fiber Distributed Data Interface 
See FDDI 
FID (file identification) 
See File identification 
FIELD account 
initial modification, Part I, 6-7 
in UAF, Part I, 6-8 
Field of data 
in SHOW CLUSTER, Part II, 19-4 
removing, Part I, 19-11 
File access 
disk, Part I, 9-138 
listing number of concurrent, Part IJ, 16-7 
tape, Part I, 9-18, 9-14 
File banner pages, Part I, 18-43, 13-60 
See also Job banner pages 
File extensions 
effect on system performance, Part II, 16-7 
specifying size, Part I, 8-238; Part II, 16-7 
system parameter controlling, Part I, 16—7 
File formats 
use with BACKUP, Part I, 10-8 
File fragmentation, Part I, 10-44 
of page and swap files, Part II, 15-24 
File headers 
index file, Part II, A—7 
contents, Part II, A—7 
extension, Part II, A-8 
primary, Part II, A-8 
File identification 
file number, Part II, A-4 
Files—11, Part II, A-4 
file sequence number (SEQ), Part II, A-4 
relative volume number (RVN), Part II, A-4 
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File Log 
VMSINSTAL.COM option, Part J, 3-14 
File names 
OpenVMS extended, Part I, 9-16 
standard, Part I, 9-16 
File protection, Part I, 9-4 
SYSDUMP.DMP file, Part I, 15-4 
Files 
See also Files—11 On-Disk Structure 
See also Parameter files 
access 
See File access 
backing up, Part I, 10-22 
comparing with BACKUP, Part I, 10-24 
copying 
from disk to standard-labeled volumes, 
Part I, 9-20 
from disk volumes, Part I, 9-20 
to tape, Part I, 9-22 
to tape volumes, Part I, 9-22 
copying with BACKUP, Part I, 10-22 
creating, Part I, 8-4 
detected bad block (DBBF), Part I, 8-62 
expiration dates on, Part I, 8-52 
for AUTOGEN feedback, Part II, 14-11 
limiting number of versions, Part I, 8-51 
logging activity during installation, Part J, 
3-14 
lost 
recovering, Part I, 8-55 
modifying characteristics, Part I, 9-9 
naming 
on Files—11 volume, Part II, A—7 
nonstandard format 
DCL commands with, Part I, 9-2, 9-13 
on public volumes, Part I, 8-8 
open during backup, Part J, 10-28, 10-53 
overwriting, Part I, 9-14 
private volumes, Part I, 8-9 
privileges, Part I, 9-4 
public, Part I, 8-8 
purging to save disk space, Part I, 8-51 
recovering lost, Part I, 8-55 
reserved, Part IJ, A4 
list of, Part I, 8-4 
restoring with BACKUP, Part I, 10-26, 10-27 
retrieving information from, Part I, 9-2 
security 
using protection codes, Part I, 9-6 
structures, Part I, 8-3 
system 
moving to reduce system disk I/O, Part I, 
16-8 
tape 
See Tape files 
tape volumes, Part I, 9-5 
writing to files on, Part I, 9-18 
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Files (cont’d) 
transferring across network, Part I, 9-24 
versions 
limiting number of, Part I, 8-51, 9-13 
VMSMAIL_PROFILE.DATA, Part I, 6-34 
Files—11 On-Disk Structure 
block 
definition, Part IT, A-1 
CD on OpenVMS, Part I, 8-5 
comparison of ODS Level 1 and Level 2, Part 
II, A-10 
creating structure, Part I, 8-11 
disk save set, Part I, 10-6 
file identification, Part IT, A-4 
master file directory (MFD), Part II, A—4 
ODS Level 1, Part I, 8-38 
directory hierarchy, Part II, A-4 
ODS Level 2, Part I, 8-3 
assigning disk quotas, Part I, 8-48 
description of, Part I, 8-4 
directory hierarchy, Part IJ, A-4 
sector, Part II, A-2 
structure, Part I, 8-38; Part II, A-3 
Level 1, Part I, 9-20; Part II, A-4 
Level 2, Part I, 9-20; Part IT, A-4 
reserved files, Part I, 8-4 
terminology, Part II, A-2 
UIC, Part I, A-4 
using Exchange utility (EXCHANGE) with 
to transfer data, Part I, 9-24 
File specifications 
ANSI, Part I, 9-16 
for installing images, Part IJ, 16-15 
File windows 
mapping pointers for, Part I, 8-24 
resetting mapping pointers for, Part I, 8-24 
FILLM process limit, Part I, 6-389 
value for efficient backups, Part I, 10-9 
Flag pages, Part I, 138-34 
file, Part I, 13-36 
job, Part I, 138-34 
Foreign volumes 


See Volumes, foreign 
Formats 
CD-ROM on disc, Part I, 8-4 
High Sierra, Part I, 8-4 
Formatting volumes, Part I, 8~12 
Form feeds . 
controlling page overflow with, Part I, 13-45 
inserting automatically in output jobs, Part J, 
13-19 
Forms 
assigning default for a queue, Part I, 13-64 
associating with jobs and queues, Part I, 13-43 
changing DEFAULT, Part I, 13-63 
commands used with, Part I, 13-61 
controlling line overflow with, Part I, 138-43, 
13-44 


Forms (cont'd) 
controlling page width, length and margin size 
with, Part I, 13-43 
controlling paper stock with, Part I, 13-43 
default, Part I, 13-64 
DEFAULT, Part I, 13-63 
defining, Part I, 13-62 
deleting, Part I, 138-65 
problems, Part I, 18-82 
description, Part I, 13-43 
displaying 
defined forms, Part I, 13-63 
forms assigned to a queue, Part I, 13-64 
formatting jobs with, Part I, 13-43 
mounting, Part I, 138-64 
_ preprinted 
aligning, Part I, 13-76, 18-77 
procedure for using, Part I, 18-44, 13-61 
specifying setup modules with, Part I, 13-43 
specifying sheet-feed paper with, Part I, 13-43 
Fragmentation of disks, Part I, 10-44 
Full backup 


See Image backup 


G 


GBLPAGES system parameter, Part II, 16-11 


GBLSECTIONS system parameter, Part IT, 16-11 
Generic queues 
batch, Part I, 13-3 
recommended use, Part I, 13-7 
creating, Part I, 13-17 
description, Part I, 13-2, 13-3 
in a VMScluster environment, Part I, 13-2 
output, Part J, 13-3, 18-11, 13-12 
recommended use, Part J, 13-11 
relationship to execution queues, Part I, 138-2 
specifying target execution queues, Part I, 
138-17 
Get Save Set 
VMSINSTAL.COM option, Part J, 3-10, 3-12 
GHR (granularity hint region) 
slicing shareable images, Part II, 16-12 
Global pages, Part IT, 16-11 
Global sections, Part IT, 16-11 
Granularity hint region 
See GHR 
Group numbers 
modifying, Part II, 19-17 
Groups 
accounting, Part II, 18-5 
Group user (security category), Part I, 11-7 
Group volumes 
definition, Part I, 8-8 
GRPPRV privilege, Part I, 11-7 


H 


Halting system 
waiting until after system dump file is written, 
Part IT, 15-2 
Hardware 
booting problem, Part I, 4-16 
importance of sufficient capacity for system 
performance, Part II, 16-6 
Header labels 
on tape files, Part I, 8-8, 9-15 
reading attributes of, Part I, 9-18 
Header resident images, Part II, 16-10, 16-12 
Help Message utility (MSGHLP), Part I, 5-24 
adding .MSGHLP$DATA files to the database, 
Part I, 5-24 
adding comments to the database, Part I, 5-27 
adding messages to the database, Part I, 5-29 
changing Digital-supplied data, Part I, 5-27, 
5-28 
compressing the database after deletions, Part 
I, 5-27 
creating databases for different user groups, 
Part I, 5-24 
default database, Part I, 5-24 
deleting Digital-supplied messages from the 
database, Part I, 5-26 
search path of database files, Part I, 5-24 
Hierarchical Storage Controller (HSC) device s 


See HSC devices 
Hierarchical Storage Controller (HSC) devices 


See HSC devices 
High Sierra format 
description of, Part I, 8-4 
on CD-ROM, Part I, 8-4 
High-water marking 
disabling for system performance, Part II, 16-7 
Holding a job, Part I, 13-71 
Holding job status, Part I, 18-69, 13-79 
Home blocks 
in index file, Part IT, A-6 
HSC devices 
configuring during system startup, Part I, 7-5 
disabling configuration during system startup, 
Part I, 7-8 


VO 

reducing on system disk, Part II, 16-8 
Identification record 

ANALYZE/DISK_STRUCTURE, Part I, 8-54 
Identifier field 

file, Part I, 9-15 

volume, Part I, 8-37 
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Identifiers 
environmental, Part I, 11-10 
general, Part I, 11-10 
system-defined, Part I, 11-10 
types, Part I, 11-10 
UIC, Part I, 11-10 
Idle queue status, Part I, 138-52 
Image backup 
command format for disks, Part I, 10-80 
command format for tapes, Part I, 10-29 
definition, Part I, 10-3 
restoring files from, Part I, 10-39 
to disk, Part I, 10-30 
to tape, Part I, 10-29, 10-30 
Image Registry facility, Part I, 5-21 
Images 
See also Known images 
concurrent access by multiple users, Part II, 
16-11 
definition, Part I, 16-9 
determining frequency of use, Part II, 16-15, 
16-16 
executable, Part II, 16-9, 16-13 
execute-only, Part IIT, 16-14, 16-15 
header resident, Part II, 16-10, 16-12 
installing 
See also Known images 
effect on RUN command, Fart II, 16-9 
in system startup, Part I, 5-4, 5-12; Part 
IT, 16-10 
reasons for, Part II, 16-8 
to improve system performance, Part II, 
16-7 
known, Part II, 16-9 
See also Known images 
linkable, Part II, 16-9 
permanently open, Part II, 16-10, 16-12 
privileged, Part IJ, 16-10, 16-13 
security caution, Part I, 16-13 
privileged shareable, Part II, 16-14 
protected, Part II, 16-10, 16-14 
protecting installed, Part I, 16-15 
relinking to improve system performance, Part 
IT, 16-7 
resident (AXP), Part II, 16-10 
running in protected modes, Part II, 16-10, 
16-14 
shareable, Part II, 16-11, 16-14 
assigning logical names for, Part I, 16-17 
slicing on AXP systems, Part II, 16-12 
system version dependent 
registering, Part I, 5-21 
user-level 
calling of protected code, Part IJ, 16-10, 
16-14 
writable, Part I, 16-11 
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Incremental backup 


command format for disks, Part I, 10-33 
command format for tapes, Part I, 10-32 
definition, Part I, 10-3 

restoring files from, Part J, 10-41 

to disk, Part I, 10-32 

to tape, Part I, 10-31 


INDEXE‘SYS file 


See Index file 


Index file 


alternate file header, Part II, A-6 
backup home block, Part II, A-5 
backup index file header, Part IJ, A-6 
bitmap, Part II, A-6 

boot block, Part IJ, A-5, A-6 
bootstrap image, Part IJ, A-6 
contents of, Part II, A-5 
description of, Part II, A-5 

file headers, Part II, A-6, A-8 
file number, Part II, A—4 

home block, Part I, A-5, A-6 
INDEXE.SYS, Part I, A-5 

in volume sets, Part J, 8-31 
reserved file, Part I, A-5 


InfoServer 


See also InfoServer Client for OpenVMS 
automatic service, Part II, 21-38 
availability, Part II, 21-4 
Client 

and DECnet, Part II, 21-10 
commands, Part II, 21-7 
console terminal, Part II, 21-6 
determining default server name, Part IT, 21-6 
downline loading with, Part IJ, 21-2 
fail over, Part II, 21-4 
functions, Part I, 21-1 
Help facility, Part II, 21-7 
load balancing, Part I, 21-5 
local connections, Part II, 21-6 
mounting devices 

in system startup, Part II, 21-13 
multicast address feature, Part II, 21-5 
protocols, Part IJ, 21-4 
relationship to client systems, Part I, 21-2 
remote connections, Part II, 21-6 
removing media, Part II, 21-3 
server name, Part II, 21-6 
service disconnection, Part II, 21-3 
setting up in system startup, Part II, 21-10 
starting a session, Part II, 21-6 
starting Client, Part I, 21-10 
support for X terminals, Part II, 21-4 
system overview, Part II, 21-1 
virtual device server, Part II, 21-1 
virtual device units, Part I, 21-12 
X terminal client, Part II, 21-4 


InfoServer Client for OpenVMS 
components, Part II, 21-8 
functions, Part II, 21-8 
mounting devices 
in system startup, Part I, 5-12 
quick access to duplicate services, Part II, 21-4 
setting up in system startup, Part I, 5-12 
software, Part II, 21-8 
starting automatically, Part IT, 21-10 
startup restrictions, Part II, 21-11 
InfoServer management session 
ending, Part II, 21-7 
InfoServer password, Part II, 21-6 
Initialization files 
creating, Part I, 19-15 
establish SHOW CLUSTER reports, Part II, 
19-5 
SHOW CLUSTER 
creating, Part I, 19-14 
SHOW_CLUSTER$INIT, Part IT, 19-14, 19-15 
use with SYSMAN, Part I, 2-15 
Initialization of system 
in a multiprocessing system, Part II, 24-2 
INITIALIZE command 
See also Disk commands 
See also INITIALIZE/QUEUE command 


See also Initializing, volumes 

creating volume identifiers for continuation 
volumes, Part I, 8-38 

disk volumes, Part I, 8-11 

for formatting page and swap file disks during 
system startup, Part I, 5-5 

mounting volume sets, Part I, 8-38 

qualifiers, Part I, 8-12 

qualifiers, list of, Part I, 8-12 

setting device protection, Part I, 8-16 
tape volumes, Part I, 9-13, 9-22 

tape volumes, Part I, 9-22 

to format and write label to volume, Part J, 
8-12 

INITIALIZE/QUEUE command, Part I, 13-16, 
13-49 

activating an autostart queue, Part I, 13-15, 
13-50 

assigning a default form, Part I, 13-64 

assigning characteristics, Part I, 13-59 

canceling characteristics, Part I, 13-59 

controlling page overflow, Part I, 138-45 

creating a generic queue, Part I, 138-17 

mounting a form, Part I, 13-64 

setting block limits, Part I, 13-33 

setting scheduling policy, Part I, 13-33 

setting UIC_based protection on queues, Part 
I, 138-24 

specifying autostart information, Part I, 13-15 

specifying banner pages, Part I, 13-60 

specifying job processing options, Part I, 13-32 

specifying queue options, Part I, 18~19 


INITIALIZE/QUEUVE command (cont’d) 
specifying reset modules, Part I, 13-66 
starting a nonautostart queue, Part J, 13-16 

Initializing , 
queues, Part I, 138-15 

See also INITIALIZE/QUEUE command 
volumes 
See also Disk commands 
See also INITIALIZE command 
assisting users, Part I, 8-13 
disk volumes, Part I, 8-11, 8-13 
results of, Part I, 10-12 
tape volumes, Part I, 9-5 
INITIAL phase of system startup, Part I, 5-4, 
5-17 

Input specifier 
to the BACKUP command, Part I, 10-4 

Input symbiont for card reader 
running interactively, Part I, 7-18 

Installation procedures 
See also Installing software 
See also VMSINSTAL.COM command procedure 
completing, Part I, 3-11 
definition, Part I, 3-2 
for OpenVMS, Part I, 3-2 
steps in, Part I, 3-2 
to run VAX system as a C2 system, Part I, 3-2 

INSTALL command 
in SYSGEN, Part II, 15-17 

in system startup, Part I, 5-6 
Installed files 
See Known images 
Installing images, Part IJ, 16-16 
See also Install utility 
See also Known images 
effect on RUN command, Part II, 16-9 
in SYSTARTUP_VMS.COM, Part I, 5-12; Part 
IT, 16-10 

reasons for, Part II, 16-8 

to improve system performance, Part I, 16-7, 
16-10 

Installing page and swap files 

in system startup, Part I, 5-5; Part II, 15-5, 
15-17, 15-18 

with AUTOGEN, Part II, 15-16, 15-20 

with SYPAGSWPFILES.COM command 
procedure, Part II, 15-17 

with SYSGEN, Part II, 15-17 

Installing software 
See also Installation procedure 
See also VMSINSTAL.COM command procedure 
completing procedure, Part I, 3-11 
layered product, Part I, 3-13 
logging file activity, Part I, 3-14 
on alternate disk, Part I, 3-10 
preparing for installation, Part I, 3-4 
shutting down DECnet, Part I, 3-5 
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Install utility (INSTALL) 
See also Installing images 


See also Known images 
and version checking, Part I, 5-22 
determining number frequency of image use, 
Part IT, 16-15, 16-16 
improving system performance, Part II, 16-7, 
16-8, 16-10 
listing number of concurrent file accesses, Part 
IT, 16-7 
making images header resident, Part II, 16-10, 
16-12 
making images privileged, Part II, 16-10, 
16-13 
permanently open images, Part II, 16-10, 
16-12 
reasons for using, Part II, 16-8 
/RESIDENT qualifier on AXP, Part II, 16-13 
slicing feature on AXP, Part II, 16-13 
Interactive identifiers, Part I, 11-10 
Interactive users 
limiting for performance management, Part II, 
16-4 
limiting in system startup, Part I, 5-15 
Interchange environment 
protection, Part I, 8-20 
_ Invoking AUTOGEN, Part II, 14-9 
IO AUTOCONFIGURE command 
in SYSMAN (AXP), Part I, 7-5, 7-7 
in system startup, Part I, 5-4, 5-7, 7-5 
IO CONNECT command 
in SYSMAN (AXP), Part I, 7-7 
in system startup, Part I, 5-7 
IO LOAD command 
in SYSMAN (AXP), Part I, 7-7 
IPC (Interrupt Priority C) 
using to cancel mount verification, Part I, 8-61 
IRG (interrecord gap), Part I, 8-6 
ISO 9660 
data interleaving, Part I, 8-6 © 
establishing default file attributes, Part I, 8-24 
format 
description of, Part I, 8-4 
format on CD-ROM, Part I, 8-4 
groups 
mounting, Part I, 8-33 
media 
showing device information, Part I, 7-4 
media protection, Part I, 8~17 
mounting a volume for, Part I, 8-23 
partially mounted volume sets, Part I, 8-34 
partially recorded data blocks, Part I, 8-5 
standard on OpenVMS, Part I, 8-5 
structure of tape, Part I, 8-5 
volume sets 
mounting, Part I, 8-33 
partially mounted, Part I, 8-34 
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ISO 9660 (cont’d) 
volume structure, Part I, 8-3 


J 


Job banner pages, Part I, 13-43, 13-60 


See also File banner pages 
$JOB card, Part I, 7-17 
Job controller 

See also JOBCTL process 


See also Queue manager 

and batch jobs, Part I, 12~3, 13-2 

communication with queue manager, Part I, 
12-3 

relationship to queue manager, Part I, 12-3, 
12-7 

starting queue manager, Part I, 12-6, 12-7 

tasks performed by, Part I, 12-3 

JOBCTL process 


See also Job controller 
creation during system startup, Part I, 5-5 
Job retention 
changing for a job, Part I, 13-74 
specifying for a job, Part I, 13-27 
specifying for a queue, Part I, 13-27 
Jobs 
See also Batch jobs 


See also Output jobs © 
changing scheduling priority, Part I, 13-72 
controlling print position and alignment, Part 
I, 13-76, 13-77 
deleting, Part I, 138-75 
holding, Part I, 138-71, 13-79 
merging, Part I, 138-57 
modifying, Part I, 13-70 
moving from one queue to another, Part I, 
13-57 
releasing, Part I, 13-71 
requeuing 
executing, Part I, 138-73 
pending, Part I, 13-74 
retaining in a queue, Part I, 13-74 
suspending, Part I, 13-76 
Job scheduling, Part I, 13-33, 138-72 
for output jobs, Part I, 13-33 
priority 
See Priority, job scheduling 
Job status 
definitions, Part I, 13-69 
error, Part I, 18-28, 13-382, 13-55, 13-74 
holding, Part I, 13-72, 13-79 
pending, Part I, 13-73, 18-75, 13-79 
retained, Part I, 13-72, 13-74 
showing, Part I, 13-28, 13-69 
use in job retention, Part I, 13-28 


Job table quota, Part I, 6-39 

Journal file of backup information, Part I, 10-25 
listing contents of, Part I, 10-25 

Journal file of queue database, Part I, 12-4 


See also Queue database 
location, Part I, 12-6, 12-7 
changing, Part I, 12-6 
JTQUOTA process quota, Part I, 6-39 


K 


Kernel mode 
calling images running in, Part IJ, 16-10, 
16-14 
logical names, Part II, 16-14 
Keypad definitions, Part II, 19-5, 19-7 
Known file lists 
definition, Part II, 16-10 
in system startup, Part I, 5-12 
Known images 
definition, Part II, 16-9 
deleting, Part II, 16-18 
dismounting volume, Part II, 16-18 
displaying, Part II, 16-16 
evaluating merits of installing, Part II, 16-15, 
16-16 
file specification for, Part I, 16-15 
installing, Part I, 16-16 
in system startup, Part I, 5-12; Part Il, 
16-10 
privilege enhancement, Part II, 16-13 
removing, Part II, 16-18 
resident, Part II, 16-12 


L 


Labels 
backup tape, Part I, 10-20 
header, Part I, 8-25 
initializing volume to write, Part I, 8-12 
trailer, Part I, 8-8 
LAD Control Program (LADCP) utility 
BIND command, Part II, 21-13 
exiting, Part II, 21-13 
Help facility, Part II, 21-13 
invoking, Part I, 21-12 ; 
making remote InfoServer devices available 
locally, Part II, 21-13 
summary, Part I, 21-13 
LADCP (LAD Control Program) 
See LAD Control Program utility 
LANs (local area networks) 
connections, Part II, 20-6 
LASTCP (Local Area System Transport Control 
Program) 
See Local Area System Transport Control 
Program 


LASTport/Disk protocol, Part II, 21-4 
LASTport/Disk service, Part IT, 21-12 
ESS$DADDRIVER, Part II, 21-12 
LASTport protocol, Part II, 21-4 
LASTport/Tape protocol, Part II, 21-4 
LASTport/Tape service, Part IJ, 21-12 
ESS$MADDRIVER, Part II, 21-12 
LASTport transport, Part IJ, 21-8, 21-12 
LAT$CONFIG.COM command procedure, Part II, 
22-9 
invoking during system startup, Part I, 5-14 
LAT$STARTUP.COM command procedure, Part 
IT, 22-9 
invoking during system startup, Part I, 5-14 
LAT$SYSTARTUP.COM command procedure, 
Part II, 22-9, 22-11, 22-13 
example, Part II, 22-14 
invoking during system startup, Part I, 5-14 


LATACP 
See LAT Ancillary Control Process 
LAT Ancillary Control Process (LATACP), Part II, 
22-15 
LAT Control Program (LATCP) utility, Part I, 
22-3, 22-7 
See also LAT software 
exiting, Part II, 22-8 
features, Part II, 22-7 
invoking, Part II, 22-8 
summary of commands, Part II, 22-8 
LATCP 
See LAT Control Program utility 
LAT server, Part II, 21-6 
LAT software 
See also LAT Control Program utility 
advantages and uses, Part II, 22—2 
application programs, Part IT, 22~2 
creating a service, Part II, 22-12 
customizing, Part IT, 22-11 
enabling outgoing connections, Part IT, 22-13 
load balancing, Part II, 22—2, 22-3 
managing the database size, Part II, 22-15 
modems, Part II, 22-2 
outgoing connections, Part IJ, 22-1, 22-3, 22-7 
printers, Part II, 22-2 
autostart queues on, Part I, 13-4, 13-10 
increasing availability of, Part I, 13-4, 
13-10 
LATSYM symbiont, Part I, 13-3, 13-79 
PRTSMB symbiont, Part I, 13-79 
sample configuration, Part I, 13-10 
setting up, Part I, 13-14 
spooling, Part I, 7-13 
troubleshooting, Part I, 13-79 
service 
announcements, Part II, 22—4, 22-7 
database, Part II, 22—7 
dedicated applications, Part II, 22-2 


Index—23 


LAT software 
service (cont'd) 
defined, Part II, 22-1, 22-2 
node, Part II, 22-3, 22—7 
remote printing, Part II, 22-2 
setting up ports, Part IT, 22-12 
starting network in command procedure, Part 
I, 5-14; Part IT, 22-9 
starting with LAT$STARTUP.COM, Part I, 
5-14; Part IT, 22-9 
terminals, Part I, 7-11; Part II, 22-2 
determining characteristics of, Part I, 7-11 
disconnecting, Part I, 7-10 
LATSYM symbiont, Part I, 13-8, 138-79 
Layered products 
startup database, Part I, 5-17, 5-18 
startup phases, Part I, 5-17 
Level 1 routers 
See Routers, Level 1 
Level 2 routers 
See Routers, Level 2 
Lexical functions 
F$GETJPI, Part II, 24-9 
F$GETQUI, Part I, 13-52 
F$GETSYI, Part II, 24-9 
getting information about queues, Part I, 
13-52 
getting information about vector processing, 
Part IT, 24-9 
LIBDECOMP.COM command procedure, Part II, 
16-6 
Libraries 
See Device control libraries 
License database 
logical name defining location, Part I, 5-8 
License Management facility (LMF) 
starting in system startup, Part I, 5-5 
Licenses 
loading, Part I, 3-6 
in system startup, Part I, 5-5 
Limits 
See Process limits 
See UAFs (user authorization files), resource 
limits 
Lines 
communications 
definition, Part II, 20-2 
network, Part II, 20-3 
definition, Part IT, 20-2 
overflow 
controlling, Part I, 13-44 
LINK (Linker utility) 
See Linker utility 
Linkable images, Part II, 16-9 
LINK command 
/SELECTIVE_SEARCH qualifier, Part I, 5-22 
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Linker utility (LINK) 
linking against SYS.STB, Part I, 5-22 
Links 
logical 
See Logical links 
List operations 
with BACKUP, Part I, 10-18 
LMF$LICENSE logical name 
defining during system startup, Part I, 5-8 
LMF (License Management facility) 
See License Management facility 
Load balancing 
using LAT software, Part II, 22-2, 22-3 
LOAD command 
in SYSGEN (VAX), Part I, 7-6 
Loading device drivers 
automatically, Part I, 7-5, 7-7 
manually 
on AXP, Part I, 7~7 
on VAX, Part I, 7-6 
Load leveling 
dynamic, Part II, 24—2 
Local area networks 
See LANs 
Local Area System Transport Control Program 
(LASTCP), Part IT, 21-8 
account requirements, Part IT, 21-11 
command summary, Part II, 21-9 
exiting, Part II, 21-9 
functions, Part II, 21-8, 21-12 
Help facility, Part II, 21-9 
invoking, Part II,21-9  - 
privileges required, Part IT, 21-9 
Local identifiers, Part I, 11-10 
Local nodes 
definition, Part I, 2-10 
Local page and swap files 
installing with SATELLITE_PAGE.COM 
procedure, Part I, 5-6; Part II, 15-18 
Location 
of page file, Part II, 15-3, 15-5 
specifying alternate, Part I, 15-22 
of queue database, Part I, 12-5, 12—7 
master file, Part I, 12-6 
queue and journal files, Part I, 12-6 
changing, Part I, 12-6 
of swap file, Part I, 15-5 
specifying alternate, Part II, 15-22 
of system dump file, Part II, 15-2 
of system files 
redefining with logical names, Part IJ, 
16-8 
Log files 
moving to reduce system disk I/O, Part II, 16-8 
operator 
creating new, Part II, 17-13 


Log files 
operator (cont’d) 
enabling and disabling classes, Part II, 
17-13 
maintaining, Part IJ, 17-15 
printing, Part II, 17-15 
purging, Part I, 17-15 
restarting, Part II, 17-15 
security alarm messages, Part II, 17-12 
setting up, Part II, 17-18 
specifying location, Part IJ, 17-13 
troubleshooting the queue manager, Part 
I, 12-14 
security audit, Part I, 17-2, 17-21 
creating, Part II, 17-21 
review policy, Part I, 17-17 
Logging in, Part I, 2-7 
See also Logins 
when errors in login procedures prevent, Part 
I, 4-8 
when errors in startup procedures prevent, 
Part I, 4-8 
when forgotten passwords prevent, Part I, 4-9 
Logging out 
while using VMSINSTAL.COM, Part I, 3-4 
Logging startup 
with SYSMAN, Part I, 4-15 
Logical links 
network, Part II, 20-3 
definition, Part I, 20-2 
Logical names 
See also Symbols 
ACCOUNTNG, Part II, 18-4 
AGEN$FEEDBACK_REQ_ TIME, Part II, 
14-21 
assigning for shareable images, Part II, 16-17 
assigning systemwide 
in system startup, Part I, 5-7 
assigning to customize the SHUTDOWN.COM 
procedure, Part I, 4-32 
assigning to devices, Part I, 5-10 
for system components 
recommended privilege mode, Part I, 5-8 
LMF$LICENSE, Part I, 5-8 
NETNODE_REMOTE, Part I, 5-8 
NETPROXY, Part I, 5-8 
OPC$LOGFILE_CLASSES, Part I, 17-14 
OPC$LOGFILE_ENABLE, Part II, 17-14 
OPC$LOGFILE_NAME, Part II, 17-13, 17-14 
privilege modes, Part I, 5-8; Part II, 16-14 
QMAN$MASTER, Part I, 12-6 
redefining location of system files, Part II, 16-8 
RIGHTSLIST, Part I, 5-8 
SHOW_CLUSTER$INIT, Part II, 19-14 
SHUTDOWN$DISABLE_AUTOSTART, Part I, 
4-33, 18-57 
SHUTDOWNS$INFORM_NODES, Part I, 4-33 


Logical names (cont’d) 
SHUTDOWN$MINIMUM_MINUTES, Part I, 
4-33 
SHUTDOWNS$TIME, Part I, 4-33 
SHUTDOWN$VERBOSE, Part I, 4-33 
specifying as mail addresses, Part I, 6-35 
STARTUP$STARTUP_LAYERED, Part I, 5-17 
STARTUP$STARTUP_VMS, Part I, 5-17 
SYS$ANNOUNCE, Part I, 5-13 
SYS$AUDIT_SERVER_INHIBIT, Part I, 5-9; 
Part II, 17-18 
SYS$DECDTM_INHIBIT, Part II, 23-19 
SYS$ERRORLOG, Part I, 5-8 
SYS$JOURNAL, Part II, 23-1 
SYS$MONITOR, Part I, 5-8 
SYS$STARTUP, Part I, 5-2 
SYS$SYLOGIN, Part I, 5-16 — 
SYS$TIMEZONE_DIFFERENTIAL, Part I, 
5-30 
SYS$WELCOME, Part I, 5-14 
SYSUAF, Part I, 5-8 
translation of, Part I, 6-35 
trusted, Part II, 16-14 
UAFALTERNATE, Part I, 4—10 
using in SYSMAN, Part J, 2-11 
VMSMAIL_PROFILE, Part I, 5-8 
Logical name tables 
definition, Part I, 5—7 
Logical queues 
assigning, Part I, 13-57 
description, Part I, 13-4 
recommended use, Part I, 138-4, 13-57 
Login command procedures 
booting without, Part I, 4-8 
defining announcements in, Part I, 5-13 
defining location of during system startup, 
Part I, 5-16 
definition, Part I, 5-16 
for captive account, Part I, 6-27 
sample, Part I, 6-28 
for SYSTEM account, Part I, 5-16 
individual, Part I, 6-15 
sample, Part I, 6-16 
in SYSMAN, Part I, 2-13 
LOGIN.COM, Part I, 5-2, 5-16 
SYLOGIN.COM, Part I, 5-2, 5-16 
systemwide, Part I, 5-16, 6-15 
sample, Part I, 6-15 
user-specified, Part I, 6-15 . 
when errors prevent you from logging in, Part 
I, 4-8 
Logins 
See also Logging in 
controlling number of dialup attempts, Part J, 
11-6 
restricting by function, Part I, 6-26 
restricting by time, Part I, 6-25, 6-26 
sequence of events, Part I, 6-6 
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LOGOUT command, Part II, 24-9 
Logout command procedures 
SYLOGOUT.COM, Part I, 6-17 
Loopback tests 
network 
circuit-level, Part II, 20-13 
definition, Part I, 20-13 
node-level, Part IT, 20-13 
Lost files 
recovering, Part I, 8-54 to 8-56 
LPBEGIN phase of system startup, Part I, 5-18 
LPBETA phase of system startup, Part I, 5-18 
LPMAIN phase of system startup, Part I, 5-18 
LTAn devices, Part I, 7-10 
LTDRIVER (LAT port driver) 
turning on and off, Part I, 22-7 


Machine check errors 
if returned when booting, Part I, 4—16 
MAD virtual tape unit, Part II, 21-12 
Magnetic tape ancillary control process 
See MTACP 
Magnetic tapes 
See also Tapes 
getting information about, Part I, 7-15 
managing 
tasks for, Part I, 7-15 
modifying device characteristics, Part I, 7-16 
protection, Part I, 8-14 
save set, Part I, 10-5 
specifying volume label for, Part I, 10-13 
Mail utility (MAIL) 
logical name for, Part I, 5-8 
MAIL$SYSTEM_FLAGS logical name, Part I, 
6-35 
managing accounts, Part I, 6-34 
READ/NEW command, Part I, 6-35 
sending AUTOGEN report with, Part I, 14-22 
user profile 
modifying, Part I, 6-34 
Maintenance releases 
applying with update procedure, Part I, 3-3 
Management environment 
clusterwide, Part I, 2-12 
defining, Part I, 2-9 to 2-12 
individual nodes, Part I, 2-10 
local and nonlocal environments, Part I, 2-10 
Manager 
queue 
See Queue manager 
Managing a multiprocessing environment, Part I, 
24-3 
tasks for, Part IT, 24-3 
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Managing a vector processing environment, Part 
IT, 24-5 
tasks for, Part II, 24-5 
Managing devices 
magnetic tape 
tasks for, Part I, 7-15 
printers 
setting characteristics, Part I, 7-12 
tasks for, Part I, 7-12 
tasks for, Part I, 7-1 
terminals 
setting characteristics, Part I, 7-9 
tasks for, Part I, 7-9 
Managing page, swap, and dump files 
tasks for, Part IT, 15-1 
Managing performance, Part II, 16-1 


See also Tuning 


See Performance, managing 
choosing a workload management strategy, 
Part IT, 16-3 
considering hardware capacity, Part I, 16-6 
distributing work load, Part II, 16-3 
evaluating tuning success, Part II, 16-6 
installing images, Part II, 16-8 
knowing your work load, Part II, 16—2 
options for, Part IT, 16-6 
system tuning, Part II, 16-4 
tasks for, Part IT, 16-1 
with vector processing, Part IT, 24—7 
Managing system parameters 
tasks for, Part IT, 14—1 
Managing the LAT database size, Part IT, 22-15 
Managing the queue manager and queue database, 
Part I, 12-1 
Mandatory updates 
definition, Part I, 3-3 
Mapping pointers 
resetting for windows, Part I, 8—24 
Marginal vector consumer 
detection of, Part IT, 24-7 
Margin size 
specifying in forms, Part I, 18-43 
Master file directory 


See MFD 
Master file of queue database, Part I, 12-4 


See also Queue database 
location 
specifying, Part I, 12-6 

mounting of disk holding, Part I, 12-6 

QMAN$MASTER logical name, Part I, 12-6 

saving, Part I, 12-12 
MAXACCTJOBS process limit, Part I, 6-39 
MAXDETACH process limit, Part I, 6-39 
Maximum account jobs process limit, Part I, 6-39 
Maximum detached process limit, Part I, 6-39 


MAXJOBS process limit, Part I, 6-39 
MAXSYSGROUP system parameter, Part I, 11—7 
MAX _DUMPFILE symbol, Part IT, 15-21 
MAX_PAGEFILEn_SIZE symbol, Part IT, 15-22 
MAX_PAGEFILE symbol, Part II, 15-21 
MAX_ prefix for AUTOGEN, Part II, 14—20 
MAX _SWAPFILEn_SIZE symbol, Part I, 15-22 
MAX_SWAPFILE symbol, Part I, 15-21 
Media errors 
analyzing, Part I, 8-62 
Memory 
allotted to vector consumer processes, Part II, 
24-7 
conserving with shareable images, Part II, 
16-11 
images in, Part II, 16-11 
information captured in crash dump, Part II, 
15-2 
physical dump, Part II, 15-3, 15-10 
selective dump, Part II, 15-3, 15-10 
making efficient use of by installing images, 
Part II, 16-8 
paging, Part II, 15-4 
sections in, Part IJ, 16-11 
swapping, Part II, 15-4 
when large sizes prevent storing a complete 
system dump, Part II, 15-10 
Messages 
broadcast 
removing, Part II, 19-10 
defining welcome, Part I, 5-13 
DIBOL 
starting the DIBOL message manager, 
Part I, 5-15 
enabling and disabling, Part II, 17-8 
error, Part I, 2-2 
removing, Part IJ, 19-10 
error log 
unknown CPU, Part I, 17-5 
unknown devices, Part II, 17-5 
unknown entry, Part II, 17-5 
indicating execution of startup command 
procedures 
site-independent, Part I, 4-5 
site-specific, Part I, 4-5 
indicating high page or swap file fragmentation, 
Part IT, 15-24 
indicating insufficient page file size, Part II, 
15-8 
indicating lack of installed page file, Part I, 
5-5 
indicating successful boot, Part I, 4—5 
indicating that a vector processor is not 
available, Part II, 24-6 
indicating that login is possible, Part I, 4-5 
login welcome, Part I, 2-7 


OPCOM 
See OPCOM messages 


Messages (cont’d) 
operator replies, Part I, 2-22; Part II, 17--10 
operator requests, Part I, 2-21 
question mark (?), Part I, 4—16 
security alarm, Part II, 17-12 
security class 
disabling, Part I, 17-14 
sending to users with OPCOM, Part I, 2-19 
user requests, Part II, 17-10 
using when managing a system, Part I, 2-2 
WRITEBOOT, Part I, 4-18 
MFD (master file directory) 
BACKUP stores save-set file in, Part II, A-8 
contains directory structure for volume set, 
Part I, 8-32 
description, Part II, A-8 
of volume, Part II, A—4 
on root volume in volume set, Part I, 8-30 
reserved file, Part II, A-8 
reserved files listed in, Part I, 8-4 
Minimum startup 
booting with, Part I, 4-13 
MIN_DUMPFILE symbol, Part II, 15-21 
MIN_PAGEFILEn_SIZE symbol, Part II, 15-22 
MIN_PAGEFILE symbol, Part IH, 15-21 
MIN_ prefix for AUTOGEN, Part II, 14-20 
MIN_SWAPFILEn_SIZE symbol, Part II, 15-22 
MIN_SWAPFILE symbol, Part II, 15-21 
Modes 
See Executive mode 
See Privilege mode 
Modifiable startup command procedure 
See Site-specific startup command procedure 
Modifying size of page, swap, and dump files 
See Changing size of page, swap, and dump 
files 
Modifying system parameters 
See Changing system parameters 
MODPARAMS.DAT file, Part IIT, 14-16, 14-18 
ADD_ prefix, Part II, 14-18 
controlling page, swap, and dump files, Part II, 
15-15, 15-20 
specifying location, Part IT, 15-22 
specifying size of individual files, Part II, 
15-22 
specifying size of total file space, Part IT, 
15-21 
controlling parameter values set by AUTOGEN, 
Part IT, 14-4, 14-18 
creating page, swap, and dump files, Part IJ, 
15-15, 15-22 
including external parameter files in, Part II, 
14-22 
increasing parameter values, Part II, 14-18 
MAX_ prefix, Part II, 14-20 
MIN_ prefix, Part I, 14-20 
sample, Part II, 14-17 
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MODPARAMS.DAT file (cont’d) 

specifying an alternate default startup 
command, Part I, 4-13 

specifying parameter values 
absolute, Part II, 14—20 
maximum, Part II, 14—20 
minimum, Part II, 14-20 

storing your system parameter changes in, 
Part IT, 14-5 


Modules 
device control 
See Device control modules 
MONITOR.COM command procedure, Part IJ, 
17-31 
used with Monitor utility, Part I, 17-31 
MONITOR command 
See also Monitor utility 
controlling amount of time between displays of 
screen images, Part II, 17-28 
recording data on time spent, Part IJ, 17-27 
recording file system and process data, Part II, 
17-27 
routing display output, Part I, 17-26 
specifying how log request is to run, Part II, 
17-25 
specifying input file, Part I, 17-27 
specifying node, Part II, 17-26 
specifying time of display, Part I, 17-27 
storing display output, Part I, 17-28 
Monitoring a multiprocessing environment, Part 
IT, 24-3 
Monitor utility (MONITOR) 
See also MONITOR command 
analyzing disk use with, Part I, 8-9 
class types, Part II, 17-22 
command procedures, Part II, 17-31 
for cluster summaries, Part II, 17-31 
to initiate continuous recording, Part II, 
17-32 
to produce cluster summaries, Part IJ, 
17-33 
description, Part I, 17-22 
directing display, Part II, 17-24 
displaying and recording concurrently, Part II, 
17-27 
displaying live monitoring, Part I, 17-25 
displaying network information, Part IJ, 20-12 
entering commands, Part II, 17-25 
exiting from, Part I, 17-25 
invoking, Part II, 17-24 
logical name for, Part J, 5-8 
MONITOR.COM command procedure 
using to create summary file, Part I, 
17-31 
MONSUM.COM command procedure 
using to generate clusterwide multifile 
summary reports, Part I, 17-31 
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Monitor utility (MONITOR) (cont'd) 


moving log file to reduce system disk I/O, Part 
I, 16-8 
parameters, Part II, 17-23 
playing back monitoring, Part I, 17-28 
playing back remote monitoring, Part I, 17-29 
producing reports, Part II, 17-30 
qualifiers, Part II, 17-24 
recording live monitoring, Part IJ, 17-27 
reports, Part II, 17-31 
rerecording monitoring, Part II, 17-80 
running continuously, Part II, 17-80 
SUBMON.COM procedure 
using to start MONITOR.COM as a 
detached process, Part II, 17-31 
MONSUM.COM command procedure, Part II, 
17-33 
used with Monitor utility, Part I, 17-31 
using to generate clusterwide multifile 
summary reports, Part IJ, 17-31 
MOUNT command 
See also Mounting volumes 
adding to a volume set, Part I, 8-22 
assigning a volume set name, Part I, 8-30 
avoiding use of /CLUSTER with SYSMAN DO 
command, Part II, 19-19 
controlling whether header labels are written to 
avolume, Part I, 8-25 
creating a public volume, Part I, 8-24 
creating a volume set, Part I, 8-22 
creating disk volume sets, Part I, 8-29 
disabling automatic notification of mount 
failures, Part I, 8-22 
disabling automatic volume switching, Part I, 
8-38 
disabling mount verification feature for disks, 
Part I, 8-23 
disabling mount verification feature for tapes, 
Part I, 8-25 
disk and tape volumes, Part I, 8-20 
enabling automatic notification of mount 
failures, Part I, 8-22 
enabling mount verification feature for disks, 
Part I, 8-23 
enabling mount verification feature for tapes, 
Part I, 8-25 
enabling the processing of subsystem ACEs, 
Part I, 8-24 
enabling the write cache for a tape device, Part 
I, 8-25 
ensuring that tape volume set has been 
initialized, Part I, 8-38 
establishing default file attributes for records on 
ISO 9660 media, Part I, 8-24 
for foreign volumes, Part I, 8-23, 8-25, 9-13 
for public volumes, Part I, 8-21 
including a quoted text string as part of mount 
request, Part I, 8-22 


MOUNT command (cont’d) 
inhibiting access checks, Part I, 8-25 
in system startup 
for remote InfoServer devices, Part IJ, 
21-13 
mounting page and swap file disks, Part I, 
5-5 
special consideration about operator 
assistance, Part I, 5-11 
in VMScluster environment, Part I, 8-21, 8-22 
mounting disks 
qualifiers, Part I, 8-22 
overriding expiration date, Part I, 9-14 
overriding protection, Part I, 8-25 
overriding protection checks, Part I, 8-23 
overriding the volume identification field, Part 
I, 8-25 
overriding UIC in second volume label, Part I, 
8-25 
parameters, Part I, 8-21 
protection codes, Part I, 9-13 
qualifiers 
to mount tape, Part I, 8-24 
qualifiers, list of, Part I, 8-22 
requesting operator assistance, Part I, 8-22 
resetting the number mapping pointers, Part I, 
8-24 
specifying block size for tape, Part I, 8-24 
specifying number of bytes in each record, Part 
I, 8-25 
specifying record size, Part I, 8-25 
specifying that other users can access current 
volume, Part I, 8-23 
specifying the number of directories that the 
system keeps in memory, Part I, 8-22 — 
specifying the number of disk blocks allocated, 
Part I, 8-238 
specifying UIC, Part I, 8-25 
suspending quota operation on a volume, Part 
I, 8-50 
tape, Part I, 9-22 
to mount disk holding page and swap files, 
Part II, 15-18 ; 
with ISO 9660 media, Part I, 8-23 
Mounted forms 
matching stock, Part I, 13-43 
Mounting forms, Part I, 138-64 
Mounting of queue database disk, Part I, 12-6 
Mounting volumes, Part I, 10-14 
See also MOUNT command 
disks, Part I, 8-20 
for queue database files, Part I, 12-6 
in system startup, Part I, 5-10 
early, Part I, 5-11 
for page and swap files, Part I, 5-5 
InfoServer, Part II, 21-13 
special consideration about operator 
assistance, Part I, 5-11 


Mounting volumes 
disks 
in system startup (cont’d) 
virtual device unit, Part II, 21-13 
if device is unavailable, Part I, 8-27 
in a VMScluster environment, Part I, 8-21 
operator assistance, Part I, 8-18 
public, Part I, 8-21 
substituting, Part I, 8-27 
tape, Part I, 8-20 
tape volume sets, Part I, 8-35 
Mounting volume sets 
See also MOUNT command 
disk, Part I, 8-31, 8-32 
tape 
with automatic volume switching disabled, 
Pari I, 8-38 
Mount messages 
disabling with SUBSYSTEM qualifier, Part I, 


8-24 
Mount utility (MOUNT) 
using to mount ISO 9660 volume sets, Part I, 
8-34 
Mount verification, Part I, 8-56 
aborted 


OPCOM message, Part I, 8-61 
aborting by dismounting, Part I, 8-60 
canceling, Part I, 8-60, 8-61 
definition, Part I, 8-56 
device off line, Part I, 8-57, 8-59 
device write-locked, Part I, 8-59 
disabling 
for disks, Part I, 8-23 
for tapes, Part I, 8-25 
enabling, Part I, 8-58 
for disks, Part I, 8-23 
for tapes, Part I, 8-25 
messages, Part I, 8-58 
operation of, Part I, 8-57 
timeout, Part I, 8-58 
OPCOM message, Part I, 8-58 
MOVE keypad function, Part II, 19-7 
Moving jobs from one queue to another, Part I, 
13-57 
MSGHLP 
See Help Message utility 
-.MSGHLP$DATA files 
adding to the Help Message database, Part I, 
5-24 
MSGHLP$LIBRARY.MSGHLP$DATA file, Part I, 
5-25 
MSGHLP$LIBRARY logical name, Part I, 5-25 
MTACP (magnetic tape ancillary control process) 
description of, Part I, 8-6 
Multiple queue managers, Part I, 12-3, 12-10 
commands affected by, Part I, 12-4 
managing queues with, Part I, 12-10 
moving queues, Part I, 12-10 
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Multiple queue managers (cont’d) 

restriction, Part I, 12-38 

specifying names of, Part I, 12-4 

specifying queue manager name, Fart J, 12-4, 

12-10 

use of queue database, Part I, 12-4 
Multiprocessing, Part IJ, 24-2 

active set, Part I, 24-2 

adding a processor, Part II, 24-3 

available set, Part IT, 24—2 

definition, Part I, 24-2 

displaying information, Part IT, 24-3 

hardware requirements, Part II, 24-2 

load leveling, Part II, 24-2 

managing, Part II, 24-3 

monitoring, Part I, 24-3 

removing a processor, Part II, 24-8 

system parameters, Part II, 24~—3 

tasks for managing, Part II, 24-3 
MULTIPROCESSING system parameter, Part II, 

24-3 
MVTIMEOUT system parameter, Part I, 8-58, 
8-60 


N 


Naming conventions 
for queue and journal files for additional queue 
managers, Part I, 12-5 
of devices, Part I, 7-1 
in a VMScluster environment, Part I, 7-1 
virtual terminals, Part I, 7-10 
NCP (Network Control Program) 
commands 
CLEAR, Part II, 20-8 
DEFINE, Part IT, 20-8 
LIST, Part I, 20-11 
PURGE, Part II, 20-8 
SET, Part IT, 20-8 
SHOW, Part II, 20-11 
controlling proxy access, Part I, 6-33 
display commands, Part II, 20-11 
Ethernet configurator, Part I, 20-12 
testing network, Part II, 20-13 
using to build or modify configuration database, 
Part II, 20-7 
NETCONFIG.COM command procedure 
’ configuring a node automatically, Part I, 20-7, 
20-9 
NETDRIVER (network driver) 
connecting (AXP), Part I, 7-7 
connecting (VAX), Part I, 7-7 
NETNODE_REMOTE logical name 
defining during system startup, Part I, 5-8 
NETPROXY.DAT file, Part I, 6-5, 6-32 
moving to reduce system disk I/O, Part II, 16-8 
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NETPROXY logical name 
defining during system startup, Part I, 5-8 
defining to reduce system disk I/O, Part II, 
16-8 
Network communications device 
connecting (AXP), Part I, 7-7 
connecting (VAX), Part I, 7-7 
Network Control Program (NCP) 


See NCP 
Network identifiers, Part I, 11-10 
Network interface 
See DECnet 
Networks 
See also DECnet 
See also Nodes 
area routing, Part II, 20-3 
becoming node in, Part II, 20-8 
bridge, Part IT, 20-5 
channel, Part II, 20-2 
circuit 
definition, Part IT, 20-2 
communications line, Part I, 20-9 


configuration command procedure 


See NETCONFIG.COM 
configurations, Part IJ, 20-4 


See also Configurations, network 
connecting to existing, Part II, 20-9 
connections, Part II, 20-6 

local area, Part II, 20-6 

multipoint, Part II, 20-7 

point-to-point, Part II, 20-7 

wide area, Part II, 20-6 

worldwide, Part II, 20-7 
definition, Part II, 20-2 
end node, Part II, 20-4 
Ethernet 

definition, Part IJ, 20-2 
getting information about nodes, Part II, 20-7 
interface 

OpenVMS, Part II, 20-5 
line 

definition, Part I, 20-2 
logical link 

definition, Part II, 20-2 
loopback tests, Part I, 20-138 
managing a node, Part I, 20-10 
monitoring tools, Part II, 20-10 

DTR/DTS, Part II, 20-12 

Monitor utility, Part II, 20-12 

NCP display commands, Part II, 20-11 

NCP Ethernet configurator, Part II, 20-12 
multinode, Part IJ,20-3 - 
multiple-area, Part II, 20-4 
nodes 

configuring, Part IT, 20-9 

connecting, . Part II, 20-6 

definition, Part II, 20-2 


Networks (cont'd) 
object 
definition, Part II, 20-2 
planning configuration, Part II, 20-9 
proxy database 
creating, Part I, 6-382 
logical name defining location, Part I, 5-8 
remote node database 
logical name defining location, Part I, 5-8 
router, Part II, 20-3 
routing 
adaptive, Part II, 20-3 
definition, Part I, 20-3 
save sets, Part I, 10-6 
security 
providing for, Part II, 20-9 
starting in system startup, Part I, 5-15 
testing 
using NCP (Network Control Program), 
Part IT, 20-13 
verifying connection to, Part IT, 20-9 
Node names 
required for OpenVMS InfoServer Client 
startup, Part I, 21-10 
specifying in MAIL, Part I, 6-35 
Nodes 
See also Networks 
adjacent, Part II, 20-2 
configuring in a network, Part II, 20-9 
connecting to network, Part II, 20-6 
definition, Part II, 20-2 
end, Part II, 20-4 
establishing in network, Part II, 20-8 
getting information about other nodes in 
network, Part II, 20-7 
in LAT database, Part II, 22-7 
monitoring, Part IJ, 20-10 
multiple network, Part II, 20-3 
nonrouting, Part IT, 20-4 
preparing system to become network node, 
Part IT, 20-9 
providing security for, Part II, 20-9 
router definition, Part II, 20-3 
routing, Part II, 20-4 
tools to monitor network, Part IJ, 20-10 
transferring files between, Part I, 9-24 
Nondeductible resource, Part I, 6-2 
Nonrouting nodes 
See End nodes 
Nonstop boot 
definition, Part I, 4-3 
performing, Part I, 4-8 
NPAGEDYN system parameter, Part II, 24—7 
NUM_ETHERADAPT symbol, Part I, 14-21 
NUM_NODES symbol, Part I, 14—21 


O 


Objects 
network 
definition, Part II, 20-2 
protecting volume, Part I, 8-14 
OPAO: device, Part I, 2-20 
OPC$LOGFILE_CLASSES logical name, Part IJ, 
17-14 
OPC$LOGFILE_ENABLE logical name, Part II, 
17-14 
OPC$LOGFILE_NAME logical name, Part I, 
17-14 
for operator log file, Part I, 17-138 
OPCCRASH.COM command procedure, Part I, 
4-27 
OPCOM (Operator Communication Manager), 
Part I, 10-16 
See also Operator log file 
automatic restart, Part I, 2-19 
classes 
enabling, Part I, 2-20 
enabling and disabling for log file, Part II, 
17-13 
communicating 
with operators, Part I, 8-18 
with users, Part I, 8-18 
components of, Part I, 2-16 
default behavior, Part I, 2-18 
disabling operator terminals, Part I, 2-21 
disabling security class messages, Part II, 
17-14 
enabling operator classes, Part I, 2-20 
enabling operator terminals, Part I, 2-20 
failure, Part I, 2-19 
illustration, Part I, 2-16 
log file, Part I, 2-18 
contents of, Part II, 17-7 
description, Part II, 17-8 
messages, Part II, 17-8 


messages 


See OPCOM messages 
mount verification, Part I, 8-58 
operator log file 

See Operator log file 
operator terminals, Part I, 2-18 
printing operator log file, Part IZ, 17-15 
process, Part I, 2-18 

creation during system startup, Part I, 5-5 
process dump file, Part I, 2-19 
replying to operator requests, Part I, 2-22 
requirements, Part I, 2-18 
restarting operator log file, Part II, 17-15 
sending messages to users, Part I, 2-19 
sending requests to an operator, Part I, 2-21 
setting up operator log file, Part IJ, 17-13 
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OPCOM (Operator Communication Manager) 
(cont'd) 
specifying default state of operator log file, 
Part II, 17-14 
startup of, Part J, 2-18 
uses of, Part I, 2-16 
using to request assistance, Part I, 10-16 
OPCOM.DMP process dump file, Part I, 2-19 
OPCOM messages, Part I, 2-18 
continuation volume request, Part I, 8-38, 
9-24 
controlling, Part I, 2-19 
mount request message, Part I, 8-26 
mount verification, Part I, 8-58 
mount verification aborted message, Part I, 
8-61 
mount verification timeout message, Part I, 
8-58 
operator reply, Part IJ, 17-10 
security alarm, Part II, 17-12 
sending, Part I, 2-19 
SYSGEN, Part IJ, 17-11 
user request, Part II, 17-10 
Open file limit, Part I, 6-39 
Open images, Part II, 16-10, 16-12 
Operating system 
building on another disk, Part I, 2-23 
copying to another system disk, Part I, 2-26 
installing, Part I, 3-2 
updating, Part I, 3-3 
upgrading, Part I, 3-3 
OPERATOR.LOG file 
See Operator log file 
Operator assistance 
operator classes, Part I, 2-20 
replying to operator requests, Part I, 2-22 
sending requests to an operator, Part J, 2-21 
special consideration for MOUNT command in 
system startup, Part J, 5-11 
with MOUNT command, Part I, 8-18 
Operator classes 
See OPCOM, classes 
Operator Communication Manager (OPCOM) 
See OPCOM 
Operator consoles 
enabling in system startup, Part I, 5-5 
Operator log file 
See also OPCOM 
See also OPCOM messages 
closing current and opening new, Part II, 17-8 
creating new, Part IJ, 17-13 
description of, Part I, 2-18 
device status message, Part II, 17-8, 17-18 
disabling security class messages, Part II, 
17-14 
enabling and disabling classes, Part II, 17-18 
enabling in system startup, Part I, 5-5 
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Operator log file (cont’d) 
initialization message, Part II, 17-8 
logging user requests in, Part II, 17-10 
maintaining, Part I, 17-15 
printing, Part IJ, 17-18, 17-15 
purging, Part II, 17-15 
during system startup, Part I, 5-13 
recording changes to system parameters, Part 
IT, 17-11 
request identification number, Part IJ, 17-10 
response recorded in, Part IJ, 17-10 
restarting, Part II, 17-15 
sample, Part II, 17-12 
security alarm messages, Part II, 17-12 
setting up, Part II, 17-7, 17-138 
specifying default state, Part I, 17-14 
specifying location, Part IJ, 17-138 
terminal enable and disable message, Part II, 
17-13 
troubleshooting the queue manager, Fart J, 
12-14 
user request and operator reply messages, Part 
II, 17-18 
volume mount and dismount messages, Part II, 
17-13 
Operators 
classes of, Part I, 2-20 
replying to requests, Part I, 2-22 
requesting assistance from, Part I, 8-18 
security terminal, Part IJ, 17-12 
sending requests to, Part I, 2-21 
terminal 
enabling and disabling, Part II, 17-8 
Operator terminals, Part I, 2-18 
designating, Part I, 2-20 
in batch or SYSTARTUP, Part J, 2-18 
enabling and disabling, Part I, 2-20, 2-21; 
Part II, 17-8 
security alarms, Part II, 17-20 
setting up, Part I, 8-18 
user request, Part I, 8-18 
Optional files 
adding and removing, Part I, 5-1 
Option list 
parameter for VMSINSTAL.COM, Fart I, 3-9 
Outgoing LAT connections, Part II, 22-3, 22-7 
enabling with LAT software, Part IJ, 22-13 
Output devices 
See Printers 
See Terminals 
Output execution queues 


See also Execution queues 

See also Output queues 

definition, Part I, 13-3 
Output jobs 

See also Output queues 

aligning forms, Part I, 18-77 


Output jobs (cont'd) 
allowing to complete before stopping a queue, 
Part I, 18-56 
changing scheduling priority, Part I, 13-72 
controlling, Part I, 13-69 
controlling print position and alignment, Part 
I, 13-76, 138-77 
deleting, Part I, 18-75 
holding and releasing, Part J, 18-71 
modifying, Part I, 13-70 
monitoring, Part I, 138-69 
requeuing 
executing, Part I, 13-73 
pending, Part I, 13-74 
resuming printing, Part I, 13-76, 13-77 
retaining in a queue, Part I, 13-74 
scheduling, Part I, 13-33, 13-72 
status 
See Job status 
suspending, Part I, 138-76 
Output queues 
See also Output jobs 
See also Output queuing environment 
allowing jobs to complete before stopping, Part 
I, 18-56 
assigning a default form, Part I, 18-64 
canceling characteristics, Part I, 13-59 
changing DEFAULT form, Part I, 138-63 
commands for managing, Part I, 13-47 
controlling line overflow in forms, Part I, 13-43 
creating, Part I, 18-15 
defining a form, Part I, 18-62 
deleting, Part I, 13-58 
execution 
description, Part I, 13-3 
printer, Part I, 13-3 
server, Part I, 13-3 
terminal, Part I, 13-3 
mounting a form on, Part I, 13-64 
on standalone workstations, Part I, 138-8 
options, Part I, 13-18 
banner pages, Part I, 13-34 
characteristics, Part J, 18-28 
controlling page and line overflow, Part I, 
138-44 
device control libraries, Part I, 13-45 
forms, Part I, 18-43 
qualifiers for specifying, Part I, 13-20 to 
13-21 
restricting access, Part I, 138-22 
retaining jobs, Part I, 18-27 
order of device control module output, Part I, 
13-46 
pausing, Part J, 138-54, 13-76 
to align position of print for preprinted 
forms, Part I, 13-76, 13-77 
to change position of print, Part I, 13-76 


Output queues (cont'd) 
rerouting jobs in, Part I, 138-57 
specifying page and margin size in forms, Part 
I, 138-48 
starting, Part I, 18-15 
status, Part I, 138-51 
stopping, Part J, 138-55, 13-56 
before shutting down a node, Part I, 13-56 
troubleshooting stalled, Part I, 13-81 
Output queuing environment 
for LAT printers, Part I, 13-10 
for mixed printers, Part I, 138-9 
for multiple printers of the same kind, Part J, 
13-11 
in VMScluster environments, Part I, 18-12 
on a standalone workstation, Part I, 13-8 
sample configurations, Part I, 13-8 to 13-14 
single printer, Part I, 13-8 
spooled printers, Part I, 13-13 
steps for setting up, Part I, 18-14 
Output specifier 
to the BACKUP command, Part I, 10-4 
Overdraft limit 
user exceeding quota, Part I, 8-47 
Overflow 
See Lines, overflow 
See Page overflow 
Owner (security category), Part I, 11-7 
Ownership 
file 
displaying, Part I, 9-7 


p 


PAGEFILE.SYS file, Part I, 15-2, 15-4 
See also Page files 
as system dump file, Part I, 15-2, 15-7 
_ required location, Part II, 15-3 
requirement 
location, Part I, 16-8 
PAGEFILEn_NAME symbol, Part II, 15-15, 
15-22 
PAGEFILEn_SIZE symbol, Part I, 15-15, 15-22 
Page files 
as system dump file, Part IT, 15-2, 15-7, 15-14 
releasing dump from, Part II, 15-14 
size required for, Part II, 15-3 
changing sizes 
with SWAPFILES.COM, Part II, 15-23 
creating 
with AUTOGEN, Part II, 15-15, 15-22 
with SYSGEN, Part IT, 15-16 
definition, Part I, 15-4 
deleting after creating a new version, Part I, 
15-25 
displaying, Part I, 15-5 
displaying the size calculated by AUTOGEN, 
Part I, 15-15, 15-20 
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Page files (cont'd) 
fragmentation of, Part IT, 15-24 
freeing dump information from, Part II, 15-4, 
15-14 
installing 
in system startup, Part J, 5-5; Part II, 
15-5, 15—17, 15-18 
when resized with AUTOGEN, Part II, 
15-16, 15-20 
with SYPAGSWPFILES.COM procedure, 
Part IT, 15-18 
with SYSGEN, Part II, 15-17 
limiting usage of, Part IT, 15-9 


location 
specifying for individual files, Part II, 
15-22 
message 
indicating high fragmentation, Part I, 
15-24 


indicating insufficient size, Part II, 15-8 
indicating lack of installed, Part I, 5-5 
monitoring usage of, Part II, 15-5 
mounting disk during system startup, Part I, 
5-5; Part II, 15-18 
moving to improve performance, Part II, 16-8 
on a satellite, Part IT, 15-18 
primary, Part II, 15-5 
purging, Part II, 15-25 
releasing dump from, Part I, 15-14 
requirements 
location, Part II, 15-3, 15-5, 16-8 
size for saving dumps, Part II, 15-3 
saving dump contents on reboot, Part I, 15-2 
secondary, Part II, 15-5, 15-18 
sizes 
See Page file sizes 
tasks for managing, Part II, 15-1 
VMScluster satellite node, Part I, 5-6 
writing crash dumps to, Part II, 15-2 
Page file sizes 
calculating 
for paging, Part II, 15-8 
for saving dumps, Part II, 15-7 
manually, Part I, 15-7, 15-8 
with AUTOGEN, Part I, 15-5 
changing 
recommended method, Part IJ, 15-20 
when to increase size, Part II, 15-8 
with AUTOGEN, Part I, 15-20 
with SYSGEN, Part IT, 15-24 
determining current, Part IJ, 15-21 
displaying AUTOGEN’s calculations, Part II, 
15-15, 15-20 
message indicating insufficient, Part II, 15-8 
required 
for paging, Part II, 15-8 
for saving dumps, Part II, 15-8, 15-7 
specifying 


Index—34 


Page file sizes 
specifying (cont’d) 
for individual files, Part IIT, 15-20, 15-22 
total for multiple files, Part II, 15-20, 
15-21 
when to increase, Part II, 15-8 
Pagelets 
size of, Part I, 6-385, 6-36 
Page overflow 
controlling, Part I, 138-45 
Pages 
size of, Part I, 6-35 ; 
on AXP system, Part I, 6-36 
on VAX system, Part I, 6-86 
Page setup modules, Part I, 13-45 


See also Device control modules 
specifying forms, Part I, 13-438 
Page width and length 
specifying in forms, Part I, 13-43 
Paging, Part II, 15-4 
increased with vector processing, Part II, 24—7 
Paging file process limit, Part I, 6-40 
PAKs (Product Authorization Keys) 
installing before using VMSINSTAL.COM, 
Part I, 3-5 
loading in system startup, Part I, 5-5 
registering for DECnet, Part II, 20-9 
PAN command, Part II, 19-6 
PAN keypad function, Part IJ, 19-7 
Paper 
See Printer paper 
See Stock 
Paper jam 
pausing printer to fix, Part I, 138-76 
Parameter files 
See also System parameters 
ALPHAVMSSYS.PAR (AXP), Part II, 14-3 
initializing parameters at boot time, Part 
IT, 14-86 
role in the boot process, Part I, 4—2 
booting with alternate, Part I, 4-6 
changing 
effects of, Part II, 14-338 
with SYSGEN, Part II, 14-33 
with SYSMAN, Part IJ, 14-27 
common in a VMScluster environment, Part II, 
14-22 
creating new 
with SYSGEN, Part II, 14-85 
default, Part I, 4-5; Part II, 14-3 
including in MODPARAMS.DAT file, Part II, 
14-22 
limitation on error checking in, Part II, 14-19 
MODPARAMS.DAT, Part IT, 14-16 
sample, Part II, 14-17 
multiple, with AUTOGEN, Part II, 14-22 
VAXVMSSYS.PAR (VAX), Part II, 14-3 


Parameter files 
VAXVMSSYS.PAR (VAX) (cont’d) 
initializing active parameters at boot time, 
Part IT, 14~36 
role in the boot process, Part I, 4—2 
Parameters 
passing to a startup command procedure, Part 
I, 5-18 
system 
See System parameters 
PARAMETERS command, Part I, 2-9 
See also System parameters 
in SYSMAN, Part II, 14-25 
summary, Part II, 14-30 
Partition, Part IT, 21-2 
$PASSWORD card, Part I, 7-17 
Password generator 
using to obtain initial password, Part I, 11-2 
Password history list, Part I, 11-2 
Passwords 
conditions required for SYSMAN, Part I, 2-10 
entering when logging in, Part I, 2-7 
forgotten by user, Part I, 6-20 
for VMScluster access 
modifying, Part I, 19-17 
InfoServer system, Part II, 21-6 
management 
forced change, Part I, 114 
guidelines for protecting, Part I, 11-5 
how to preexpire, Part I, 11-3 
length of passwords, Part I, 11-4 
reasons to assign system passwords, Part 
I, 11-3 
secondary passwords, Part I, 11-4 
setting the expiration for, Part I, 11-4 
setting up initial passwords, Part I, 11-2 
when to use dual passwords, Part I, 11-2 
modifying system, Pari I, 6—7 
modifying user, Part I, 6-12 
when forgotten prevents you from logging in, 
Part I, 4-9 
with SYSMAN, Part I, 2-12 
PATHWORKS 
startup restrictions, Part I, 21-11 
Paused queue status, Part I, 138-52 
Pausing an output queue, Part I, 13-76 
to align position of print for preprinted form, 
Part I, 18-76, 13-77 
to change position of print, Part I, 138-76 
Pausing queue status, Part J, 138-52 
Pending bad block log file 
BADLOG.SYS, Part I, A-9 
reserved file, Part II, A~9 
Pending jobs 
requeuing, Part I, 13-74 
troubleshooting, Part I, 13-79 


Pending job status 


definition, Part J, 18-69 

deleting a job in, Part J, 13-75 

determining whether a job is in, Part I, 13-79 

inducing with STOP/QUEUE/REQUEUE 
command, Part I, 13-73 

requeuing ajobin, Part I, 13-74 


Percent sign (%) 


wildcard character 
using with tape volumes, Part I, 9-16 


Performance 


See also Managing performance 

See also Tuning 

disk, Part I, 8-28 

effect of file extension on, Part II, 16-7 
importance of correct page file size, Part I, 


15-8 
importance of correct swap file size, Part I, 
15-9 
importance of sufficient hardware capacity, 
Part II, 16-6 
improving 
decompressing system libraries, Part II, 
16-6 
designing efficient applications, Part II, 
16-4 
disabling high-water marking, Part II, 
16-7 ; 
encouraging batch processing, Part IJ, 
16-3 
for vector processing with batch queues, 
Part II, 24-7 
installing frequently used images, Part II, 
16-7, 16-8 
moving page and swap files off system disk, 
Part IT, 15-5 


options for, Part II, 16-6 
reducing system disk I/O, Part II, 16-8 
relinking images, Part I, 16-7 
restricting the number of interactive users, 
Part IT, 16-4 
restricting user login hours, Part II, 16-4 
setting RMS file extend parameters, Part 
IT, 16—7 
slicing shareable images, Part I, 16-12 
tuning the system, Part II, 16-4 
with AUTOGEN feedback, Part IT, 14—10 
load balancing on public volumes, Part I, 8-9 
management 
using MONITOR, Part II, 17-30 
monitoring, Part II, 16-2 
tools used for, Part II, 16-2 
of vector processing, Part II, 24—4 
testing for disks, Part I, 8-9 
Permanent databases 
network, Part II, 20-8 
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PGFLQUOTA process limit, Part I, 6-40 
limiting page file usage with, Part IT, 15-9 
minimum recommended value, Part I, 15-9 
value for efficient backups, Part I, 10-9 

Physical dump, Part II, 15-3 
compared to selective dump, Part IJ, 15-3, 

15-10 

Pooled resource, Part I, 6-2 

Ports 
setting up LAT, Part I, 18-14 

Position of print 
aligning for preprinted forms, Part I, 13-76, 

13-77 
changing, Part I, 18-76 

PostScript printing, Part I, 13-9 

PRCLM process limit, Part I, 6-40 

Preventing autostart queues from starting, Part I, 

13-55 

PRIMARY day 
defining for accounts, Part I, 6-25 

Primary page file, Part II, 15-5 
See also PAGEFILE.SYS file 
See also Page files 
location requirement, Part II, 16-8 

Primary processors, Part II, 24-2 

Primary swap file, Part II, 15-5 
See also SWAPFILE.SYS file 
See also Swap files 

PRINT command 
bypassing symbiont formatting, Part I, 13-45 
overriding default form-feed options with, Part 

I, 18-45 
preventing users from executing, Part I, 18-54 
processing of, Part I, 13-2 
specifying a form, Part I, 13-43 
specifying banner pages, Part J, 13-60 
specifying characteristics, Part I, 13-28 
specifying job retention, Part J, 13-74 
specifying scheduling priority, Part I, 18-73 
specifying setup and page setup modules, Part 
I, 13-68 

Printer paper 
controlling with forms, Part I, 13-43, 13-64 
pausing to align, Part I, 13-76 
sheet feed, Part I, 13-62 
specifying stock, Part I, 138-62 
specifying width, Part I, 138-62 

Printers 
controlling functions of, Part J, 18-45 
LAT 

See LAT, printers 
managing 
tasks for, Part I, 7-12 
setting characteristics, Part I, 7-12, 13-14 
in system startup, Part I, 5-11, 7-12 
setting up before creating queues, Part I, 
13-14 
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Printers (cont'd) 
spooled, Part I, 13-14 
definition, Part I, 7-13 
despooling, Part I, 7-15 
recommended use, Part I, 7-13 
requirement, Part I, 7-12 
sample configuration, Part I, 13-13 
spooling, Part I, 7-13 
testing spooling of, Part I, 7-15 
troubleshooting, Part I, 18-78 
Print forms 
See Forms 
Printing 
distributed, Part J, 18-13 
from applications using spooled printers, Part 
I, 7-138 
job status, Part I, 138-69 
PostScript, Part I, 138-9 
remotely, Part I, 13-13 
resuming at a specified position, Part I, 13-76, 
13-77 
Print jobs 
See Output jobs 
Print queues 
See Output queues 
Print symbionts 
See Symbionts 
Priority, Part I, 6-2 
base, Part I, 6-2, 6-29 
choosing for a batch queue, Part I, 13-30 
effect of changing, Part I, 13-6 
specifying for a batch queue, Part I, 13-29 
specifying for a queue, Part I, 13-19 
job scheduling, Part I, 13-72, 18-73 
See also Job scheduling 
changing for a job, Part I, 138-72, 13-73, 
13-74 
display on banner pages, Part I, 13-36, 
13-38, 18-41, 13-42 
specifying for a job, Part I, 13-71, 13-73 
Private volumes, Part I, 8-9 
Privileged images, Part I, 16-10, 16-13 
Privilege mode 
recommended for logical names of system 
components, Part I, 5-8 
Privileges 
all, Part I, 6-4 
allowing nonprivileged users to run programs 
that require, Part I, 16-13 
changing in SYSMAN, Part I, 2-13 
enhancement for installed files, Part I, 16-13 
files, Part I, 6-4 
for SYSTEM account, Part I, 2-7 
process, Part I, 6-3 
required to mount volumes, Part I, 8-14 
SECURITY 


Privileges 
SECURITY (cont’d) 
to mount volume with protected 
subsystems, Part I, 8-14 
SYSNAM, Part I, 8-16 
SYSPRV, Part I, 8-16 
VOLPRO, Part I, 8-13 
to mount volume as foreign, Part I, 8-14 
Problems 
See also Troubleshooting 
booting 
fixing by booting with default parameter 
values, Part I, 4-7 
fixing by booting with minimum startup, 
Part I, 4-13 
hardware, Part I, 4-16 
invalid boot block, Part I, 4-17 
devices not recognized by the sytem, Part I, 
7-6 
forgotten password 
fixing by booting without the UAF, Part I, 
4-9 
logging in, Part I, 4-8, 4-9 
OPCOM failure, Part I, 2-19 
queue manager, Part I, 12-13 
Processes 
maintaining when disconnecting a terminal, 
Part I, 7-10 
priority, Part I, 6-29 
See also Priority, base 
See also Priority, job scheduling 
Processing environments 
multiprocessing 
See Multiprocessing 
vector processing 
See Vector processing 
Processing job status, Part I, 13-70 
Process limits, Part I, 6-2, 6-36 
account jobs, Part I, 6-39 
adjusting for vector processing, Part IJ, 24—7 
AST queue, Part I, 6-37 
CPU default 
specifying a value for batch queues, Part J, 
138-19, 138-29, 138-32 
CPU maximum 
specifying a value for batch queues, Part J, 
13-19, 138-29, 13-32 
CPU time, Part I, 6-38 
detached process, Part I, 6-39 
direct I/O count, Part I, 6-38 
enqueue quota, Part I, 6-38 
expiration, Part I, 6-39 
for Snapshot facility, Part I, 4-21 
jobwide logical name table, Part I, 6-39 
open file, Part I, 6-39 
paging file, Part I, 6-40 
process jobs, Part I, 6-39 


Process limits (cont’d) 
recommended values for backups, Part I, 10-9 
See also Resource limits, Part I, 5-33 
setting before a backup, Part J, 10-8 
subprocess creation, Part I, 6-40 
system resources, Part I, 6-36 
timer queue entry, Part I, 6-40 
working set default size, Part I, 6-40 
working set extent, Part I, 6-40 
working set quota, Part I, 6-40 


Processors 
adding to a multiprocessing active set, Part II, 
24-3 
removing from a multiprocessing active set, 
Part II, 24-3 


Process quotas 


see Process limits 
Product Authorization Keys (PAKs) 


See PAKs 
Product list 
obtaining, Part I, 3-8 
VMSINSTAL.COM parameter, Part I, 3-7 
Profiles 
in Mail, Part I, 6-34 
in SYSMAN, Part I, 2-12 
changing default directory, Part I, 2-14 
changing privileges, Part I, 2-13 
Protected images, Part II, 16-10, 16-14, 16-15 
Protected subsystems, Part I, 6-15 
enabling, Part I, 8-28 
mounting a volume with, Part I, 8-14 


_ Protection 


See also Protection codes 
See also Security 
ACL-based, Part I, 6-14, 6-30, 11-8 
applying to public disk volumes, Part I, 8~15 
applying to queues, Part I, 18-22 to 13-27 
applying to system dump file, Part IZ, 15-4 
assigning code when mounting a volume, Part 
I, 8-23 
changing, Part I, 8-16 
changing with PROTECTION qualifier, Part J, 
8-18 
default, Part I, 9-7 
changing, Part I, 9-8 
directory 
changing with SET PROTECTION 
command, Part I, 9-138 
specifying with CREATE/DIRECTORY 
command, Part I, 9-13 
specifying with /PROTECTION qualifier, 
Part I, 9-13 
disk volume, Part I, 8-16 
display, Part I, 9-7 
file, Part I, 9-4 
default, Part I, 9-6, 9-8 
directory, Part I, 9-4, 9-11 
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Protection 

file (cont'd) 
disk, Part I, 9-4, 9-6 
for public disk volumes, Part I, 8-15 
for system dump file, Part II, 15-4 
ISO 9660-formatted media, Part I, 8-17 
magnetic tape, Part I, 9-13 
tape, Part I, 9-4 

for interchange environments, Part I, 8-20 

format for object, Part J, 11-8 

mask, Part I, 8-16 


mounting a volume with protected subsystems, 


Part I, 8-28 
of devices, Part I, 7-5 
of volume, Part I, 8-14 
overriding, Part I, 8-25 
qualifier for SET VOLUME command, Part I, 
8-18 
UIC-based, Part I, 6-14 
volume, Part I, 9-4 
disk, Part I, 8-14, 8-15 
ISO 9660-formatted media, Part I, 8-17 
standard-labeled, Part I, 8-19 
tape, Part I, 8-15, 8-19, 9-22 
VOLPRO privilege, Part I, 8-13 
volume set 
ISO 9660-formatted media, Part I, 8-17 
Protection checks 
MOUNT command 
overriding, Part I, 8-23 
Protection codes 
changing, Part I, 9-8 
format, Part I, 11-7 
null access specification, Part I, 11-7 
providing security for files, Part I, 9-6 
specifying, Part I, 9-6 
Protocols 
LASTport, Part IT, 21-4, 21-5 
LASTport/Disk, Part IJ, 21-4, 21-5 
LASTport/Tape, Part IT, 21-4, 21-5 
Proxy accounts 
adding, Part I, 6-32 
Proxy database 
logical name defining location, Part I, 5-8 
Proxy logins 
controlling system use, Part I, 6-33 
PRTSMB symbiont, Part I, 13-3 
on LAT printers, Part I, 13-79 
Public volumes, Part I, 8-8 
access to, Part I, 8-8 
changing protection, Part I, 8-18 
checking protection, Part I, 8-18 
conditions for using, Part I, 8-8 
creating with SYSTEM qualifier, Part I, 8-24 
definition, Part I, 8-8 
initializing, Part I, 8-12 
guidelines, Part J, 8-13 
load balancing, Part I, 8-9 
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Public volumes (cont’d) 
mounting, Part I, 8-20, 8-21 
in system startup, Part I, 5-10 
mounting volume sets, Part I, 8-29 
on large configurations, Part I, 8-8 
on small configurations, Part I, 8-8 
planning, Part I, 8-8 
protecting, Part I, 8-15 
setting protection, Part I, 8-18 
testing disk performance, Part I, 8-9 
PURGE command 
NCP, Part IT, 20-8 
saving disk space, Part I, 8-51 


Q 


QMAN$MASTER.DAT file 


See Master file of queue database 
QMAN$MASTER logical name, Part J, 12-6 
defining during system startup, Part I, 5-8 
defining to reduce system disk I/O, Part I, 
16-8 
QUANTUM system parameter, Part II, 24-8 
Queue characteristics 
canceling, Part I, 13-59 
commands for managing, Part I, 138-58 
defining, Part I, 13-58 
definition, Part I, 13-28 
deleting, Part I, 138-60 
obtaining information about, Part I, 18-52, 
13-59 
problems 
deleting, Part J, 13-82 
mismatch, Part J, 138-81 
sample use of, Part I, 138-29 
specifying 
onajob, Part I, 13-28 
on a queue, Part I, 18-19, 138-29, 13-59 
storage of in queue database, Part I, 13-17 
Queue commands 
affected by multiple queue managers, Part I, 
12-4 
creating a queue database, Part I, 12-7 
creating queues, Part I, 13-49 
deleting queues, Part I, 13-58 
displaying information about the queue 
manager, Part I, 12-11 
displaying jobs, Part I, 18-69 
displaying queues, Part I, 13-50 
enabling autostart, Part I, 13-16, 13-18, 13-49 
managing banner pages, Part I, 13-60 
managing characteristics, Part I, 13-58 
managing device control libraries, Part I, 
13-65 
managing forms and stock, Part I, 138-61 
managing queues, Part I, 13-47 
modifying jobs, Part I, 138-70 
modifying queues, Part I, 138-54 


Queue commands (cont'd) 


pausing queues, Part I, 13-54 
relationship between starting and enabling 
autostart, Part I, 13-4 
setting UIC_based protection, Part I, 13-24 
showing UIC-based protection, Part I, 13-24 
specifying options, Part J, 18-19, 13-32 
starting queues 
autostart, Part J, 13-16, 13-18 
nonautostart, Part I, 18-17, 13-49 
starting the queue manager, Part I, 12-7 
caution, Part I, 12-8 
creating an additional queue manager, 
Part I, 12-10 
restarting, Part I, 12-9 
specifying failover list, Part I, 12-9 
specifying name of queue manager, Part I, 
12-10 
specifying nodes to run the queue manager, 
Part I, 12-6 
stopping 
all queues on a node, Part I, 12-9 
queues, Part I, 13-50 
the queue manager, Part I, 12-9 
stopping queues, Part I, 13-55 


Queue configurations 


sample batch queuing system, Part I, 13-4 to 
13-7 

sample output queuing environment, Part I, 
13-8 to 13-14 


Queue database 


See also Journal file of queue database 
See also Master file of queue database 


See also Queue file of queue database 

closing, Part I, 12-9 

creating, Part I, 12-7 

default location, Part I, 12-5 

definition, Part I, 12-4 

determining location, Part I, 12-7 

determining location of master file, Part I, 
12-5 

determining location of queue and journal file, 
Part I, 12-6 

files comprising, Part I, 12-4 

for multiple queue managers, Part I, 12-4, 
12-5 
naming convention, Part I, 12-5 

function, Part I, 12-4 

logical name defining location, Part I, 5-8 

managing, Part I, 12-1 

mounting the disk holding, Part I, 12-6 

moving, Part I, 12-5 

moving to reduce system disk I/O, Part II, 16-8 

requirement in a VMScluster environment, 
Part I, 12-5, 12-6 

restoring a damaged, Part I, 12-12 

saving, Part I, 12-11 


Queue database (cont'd) 
specifying location, Part I, 12-5 
Queue failover, Part I, 138-4 
Queue file of queue database, Part I, 12-4 


See also Queue database 
location, Part I, 12-6, 12-7 
changing, Part I, 12-6 
saving, Part I, 12-12 
Queue forms 


See Forms 
Queue manager 
automatic restart, Part I, 12-3, 12-7, 12-9, 
12-16 
availability of, Part I, 12—-9, 12-16 
communication with job controller, Part I, 12-38 
creating an additional, Part I, 12-10 
default name, Part I, 12-4 
definition, Part J, 12-1 
displaying information about, Part J, 12-11 
failover, Part I, 12-3, 12-16 
forcing, Part I, 12-9 
list of nodes for, Part I, 12-9, 12-16 
function, Part I, 12-1 
limiting nodes that can run, Part I, 12—9 
managing, Part I, 12-1 
moving to another node in a VMScluster, Part 
I, 12-10 
multiple, Part I, 12-3, 12-10 
commands affected by, Part I, 12-4 
managing queues with, Part I, 12-10 
moving a queue to another queue manager, 
Part I, 12-10 
restriction, Part I, 12-3 
specifying queue manager name, Part I, 
12-4, 12-10 
naming, Part I, 12-10 
relationship to queues, Part I, 12-1 
restarting, Part I, 12-9 
role in queuing process, Part I, 12-2, 13-2 
print jobs, Part I, 13-3 
role in starting active autostart queues, Part I, 
13-4 
specifying name of, Part I, 12-10 
specifying preferred order in which nodes run, 
Part I, 12-9 
starting initially, Part I, 12-7 
stopping, Part J, 12-9 
troubleshooting, Part I, 12-13, 12-14 
Queue master file 
logical name defining location, Part I, 5-8 
Queue names 
default for batch queue, Part I, 13-5 
default for print queue, Part I, 13-8 
defining, Part I, 13-15 
Queue options, Part I, 13-18 
banner pages, Part I, 138-34 
characteristics, Part I, 13-28 
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Queue options (cont’d) 


controlling job performance and resources, Part 
I, 18-29 

controlling page and line overflow, Part I, 
138-44 

device control libraries, Part I, 138-45 

forms, Part I, 138-43 

qualifiers for specifying, Part I, 13-19 to 13-22 

restricting access, Part I, 13-22 

retaining jobs, Part I, 13-27 


Queues 


activating an autostart, Part I, 13-15, 13-16, 
13-50 
allowing jobs to complete before shutdown, 
Part I, 13-56 
assigning a default form, Part I, 138-64 
assigning device control libraries, Part I, 138-67 
autostart, Part I, 13-4 
See also Autostart feature 
See also Autostart queues 
activating, Part I, 13-4 
on LAT queues, Part I, 138-4, 13-10 
starting, Part I, 138-4 
availability of, Part I, 13-4, 18-15 
batch 
setting up for vector processing, Part II, 
24-7 
batch execution 
See Batch queues 
canceling characteristics, Part I, 13-59 
changing DEFAULT form, Part I, 13-63 
changing options on, Part I, 13-54 
characteristics, Part I, 13-28 
closing, Part I, 18-54 
command 
See Queue commands 
creating, Part I, 138-15, 138-49 
autostart execution, Part I, 13-15, 13-16 
generic, Part I, 138-17 
nonautostart execution, Part I, 13-16 
defining a characteristic, Part I, 138-58 
defining a form, Part I, 13-62 
deleting, Part I, 13-58 
deleting a job in, Part I, 13-75 
displaying information about, Part J, 13-50 
failover of, Part I, 13-15 
forms, Part I, 13-43 
gathering information with F$SGETQUI, Part I, 
13-52 
generic batch, Part I, 13-7 
See also Generic queues 
generic output, Part J, 13-11 
See also Generic queues 
holding and releasing jobs, Part I, 13-71 
in a VMScluster environment, Part I, 19-2 
initializing, Part I, 13-49 
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Queues (cont'd) 

managing with multiple queue managers, Part 
I, 12-10 

merging, Part I, 138-57 

modifying, Part I, 138-54 

monitoring, Part I, 13-50 

mounting a form on, Part I, 13-43, 13-64 

moving jobs from one queue to another, Part I, 
18-57 

moving to another queue manager, Part J, 
12-10 

on standalone workstations 
batch, Part I, 13-5 
output, Part I, 13-8 

output execution 
See Execution queues 


See Output queues 
pausing, Part I, 13-54 
print 

See Output queues 
problems deleting, Part J, 138-82 
protection, Part I, 138-22 to 138-27 
reinitializing existing, Part I, 18-54 
requeuing 

executing job, Part I, 13-73 

pending job, Part I, 13-74 
simplifying startup, Part I, 13-4 
spooling printers, Part I, 7-13, 13-14 
starting 

autostart, Part I, 138-49 

in startup command procedure, Fart I, 
13-18 

in system startup, Part I, 5-11 

nonautostart, Part I, 13-16, 13-49 
startup command procedure, Part I, 5-11 

sample, Part I, 13-18 
stopping, Part I, 18-55 

abruptly, Part I, 13-55 

all queues on a node, Part I, 138-56 

before shutdown, Part I, 13-56 

smoothly, Part I, 18-55 
types, Part I, 13-2 

of output execution, Part I, 13-3 

Queue status, Part I, 13-50, 13-51 

determining, Part I, 13-78 


Queuing system 
See Batch and print queuing system 
QUOTA.SYS file 


See Quota file 
Quota file 
Analyze/Disk_Structure utility creates version, 
Part II, A-9 
contents, Part I, 8-47 
creating, Part I, 8-49 
deleting, Part I, 8-51 
disabling, Part I, 8-51 


Quota file (cont'd) 
QUOTA.SYS, Part II, A-9 
requirements for, Part I, 8-49 
reserved file, Part IIT, A-9 
UIC [0,0] in, Part I, 8-47 
updating, Part I, 8-51 
Quotas 
See also Process limits 
See also UAF'ss (user authorization files), 
resource limits 
disk 
See Disk quotas 


R 


Read 
access 
for files, Part I, 9-6 
Read access, Part I, 11-8 


See also Access types, read 
Read error 

if returned when booting, Part I, 4-16 
Read operation 


See Access types, read 
Read/write disk 
partitions, Part II, 21-2 
Real-time priority, Part I, 6-29 
Records 
blocking 
on tapes, Pari I, 8-7 
size, Part I, 8-25 
Recovering lost files, Part I, 8-55 
Reducing I/O on system disk, Part I, 16-8 
Registering images with system version 
dependencies, Part I, 5-21 
Reinitializing volumes, Part I, 8-43 
Release Notes 
VMSINSTAL.COM option, Part I, 3-14 
Releasing a job, Part I, 138-71 
Remote identifiers, Part I, 11-10 
Remote InfoServer device 
BIND command, Part II, 21-13 
making available, Part II, 21-13 
mounting during system startup, Part II, 
21-13 
Remote node database 
logical name defining location, Part I, 5-8 
Remote nodes ' 
definition, Part I, 2—10 
Remote printing, Part I, 18-13 
Remote queue status, Part I, 13-52 
Remote terminals, Part I, 7-10 
Repairing disk structure errors, Part I, 8-55 
REPLY command 
canceling a user request, Part I, 8-27; Part II, 
17-10 
closing current operator log file, Part I, 17-8 


REPLY command (cont’d) 
disabling operator terminals, Part I, 2-21; 
Part II, 17-9 
enabling operator terminals, Part I, 2-20; 
Part II, 17-8 
specifying terminal, Part II, 17-9 
ensuring that correct volume is mounted, Part 
I, 8-389 
initializing tape, Part I, 8-40 
linking continuation volume to volume set, 
Part I, 8-39 
opening a new operator log file, Part II, 17-8, 
17-13 
putting request in wait state, Part I, 8-27 
replying to requests, Part I, 2-22, 8-27 
response not recorded in operator log file, Part 
IT, 17-10 
sending messages to users, Part I, 2-19 
REPLY/ENABLE=SECURITY command 
enabling security operator terminals, Part II, 
17-20 
Reporting errors 
disk structure, Part I, 8-55 
Reports 
AUTOGEN, Part IT, 14-22 
SHOW CLUSTER 
adding classes of data, Part II, 19-4 
adding data, Part II, 19-8 
adding fields of data, Part IT, 19-4 
changing default at startup, Part II, 19-14 
command to modify, Part I, 19-10 
compressing reports, Part II, 19-11 
controlling the display, Part II, 19-5, 
19-10 
controlling with command procedures, Part 
IT, 19-5, 19-16 
moving display, Part II, 19-12 
organization of, Part II, 19-4 
panning, Part II, 19-6 
scrolling, Part II, 19-14 
REQUEST command 
recording request in operator log file, Part II, 
17-10 
sending requests to an operator, Part I, 2-21; 
Part I, 17-10 
Request identification number 
in operator log file, Part II, 17-10 
Requeuing 
executing job, Part I, 13-73 
pending job, Part I, 13-74 
Reserved files, Part IJ, A-4 
backup log file (BACKUP.SYS), Part II, A-9 
bad block file (BADBLK.SYS), Part II, A-8 
continuation file (CONTIN.SYS), Part II, A-9 
index file INDEXF.SYS), Part IT, A-5 
list of, Part I, 8-4; Part II, A-5 
master file directory (MFD), Part II, A-8 
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Reserved files (cont'd) 
pending bad block log file (BADLOG.SYS), Part 
I, A-9 
quota file (QUOTA.SYS), Part I, A-9 
storage bit map file (BITMAP.SYS), Part JI, 
A-8 
volume security profile (SECURITY.SYS), Part 
IT, A-9 
volume set list file (VOLSET.SYS), Part II, A-9 
Reset modules, Part I, 138-45 


See also Device control modules 
Resident images 
installing (AXP), Part II, 16-10, 16-12, 16-13 
in system startup, Part I, 5-12 
Resource limits 
See also Process limits 
Resource use 
producing reports of, Part II, 18-4 
Restarting OPCOM (Operator Communication 
Manager) 
automatic, Part I, 2-19 
when automatic restart fails, Part I, 2-19 
Restarting the queue manager, Part I, 12-9 
Restore operations 
with BACKUP, Part I, 10-26 
Restoring directories, Part I, 10-28 
Restoring files, Part I, 10-27 
from an image backup, Part I, 10-39 
from an incremental backup, Part J, 10-41 
Restoring the queue database, Part I, 12-12 
Restricted accounts, Part I, 6-27 
RESTUSER.COM command procedure, Part I, 
10-34 
Resuming printing of an output job, Part I, 13-76, 
13-77 
Resuming queue status, Part J, 13-52 
Retained job status, Part I, 13-74 
definition, Part I, 13-70 
releasing jobs in, Part I, 18-72 
Retaining jobs in a queue 
changing retention of a job, Part I, 13-74 
Rights database, Part I, 5-8 
RIGHTSLIST.DAT file, Part I, 6-5 
moving to reduce system disk I/O, Part II, 16-8 
RIGHTSLIST logical name 
defining during system startup, Part I, 5-8 
defining to reduce system disk I/O, Part II, 
16-8 
RMS 
access to files at record level, Part I, 9-13 
RMS_EXTEND_SIZE system parameter, Part II, 
16-7 
Root directory 
adding to an existing system disk, Part I, 2-27 
Root volume 
definition, Part I, 8-30 
MFD on, Part I, 8-30 
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Routers 
Level 1 
definition, Part II, 20-38 
Level 2 
definition, Part IIT, 20-38 
network 
definition, Part IT, 20-8 
end node, Part II, 20-4 
Routing 
levels of, Part II, 20-3 
network 
adaptive, Part II, 20-3 
area, Part II, 20-3 
definition, Part II, 20-3 
Routing node 
See Routers 
RSM (Remote System Manager) 
startup restrictions, Part IJ, 21-11 
RT—11 volume 
block-addressable, Part I, 9-24 
RTAn devices, Part I, 7-10 
RUN command 
effect of installed images on, Part II, 16-9 


RVN (relative volume number) 
See File identification, relative volume number 


S 


SATELLITE_PAGE.COM command procedure, 
Part I, 5-6; Part I, 15-18 
execution of during system startup, Part I, 5-4 
SAVEDUMP system parameter, Part II, 15-2, 
15-3, 15-7 
Save sets, Part I, 10-5, 10-22 
Files—11 disk, Part I, 10-6 
Get Save Set 
VMSINSTAL.COM option, Part I, 3-12 
listing the contents of, Part I, 10-17 
magnetic tape, Part I, 10-5 
multivolume, Part J, 10-28 
name, Part I, 10-23 
network, Part I, 10-6 
on multiple tapes, Part I, 10-20 
product 
storing temporarily during installation, 
Part I, 83-12 
sequential disk, Part I, 10-6 
types, Part I, 10-5 
Saving the queue database, Part I, 12-11 
Scalar 
definition, Part II, 24-4 
SCB (storage control block) 


See Storage control block (SCB) 
Scheduling, Part I, 6-2 

See also Priority, job scheduling 

of batch jobs, Part I, 13-72 

of print jobs, Part I, 13-33, 138-72 


SCROLL command, Part II, 19-13 
SCROLL keypad function, Part II, 19-7 
SCSNODE system parameter, Part IJ, 21-10 
SDA (System Dump Analyzer utility) 
See System Dump Analyzer utility 
Search lists 
priority of installed images, Part II, 16-9 
Search path of Help Message database files, Part 
I, 5-24 
SECONDARY day 
defining for accounts, Part I, 6-25 
Secondary page and swap files, Part I, 15-5 
See also Page files 


See also Swap files 
creating 
in system startup, Part I, 15-18 
with AUTOGEN, Part I, 15-15, 15-22 
with SYPAGSWPFILES.COM procedure, 
Part II, 15-18 
improving system performance, Part II, 16-8 
installing 
in system startup, Part II, 15-18 
requirement, Part II, 15-5 
with SYPAGSWPFILES.COM command 
procedure, Part II, 15-18 
installing during system startup, Part I, 5-5 
Secondary passwords, Part I, 11-4 
Secondary processors, Part IT, 24-2 
Sections 
global, Part I, 16-11 
pages, Part II, 16-11 
Sectors 
Files—11 
definition, Part II, A-2 
Security 
See also Protection 
alarm messages, Part II, 17-12 


alarms 
enabling, Part II, 17-20 
auditing 
defining log file in system startup, Part J, 


5-9 
description, Part I, 17-16 
enabling operator terminal, Part II, 17-20 


audit log files 


See also Security audit log files 
class messages 

disabling, Part I, 17-14 
enabling operator terminals, Part II, 17-12 
file 

using protection codes, Part I, 9-6 
messages in operator log file, Part IJ, 17-12 
network 

See also DECnet, security 

providing for, Part IT, 20-9 
OPCOM alarm messages, Part IJ, 17-12 
password management, Part I, 11-2 


Security (cont'd) 
protected subsystems, Part I, 8-28 
protecting public disk volumes, Part I, 8-15 
protecting queues, Part I, 18-22 
protecting the system dump file, Part I, 15-4 
risk of compromise by installing images with 
privileges, Part II, 16-13 
specifying alarm events, Part I, 17-12 
VMScluster, Part II, 19-16 
SECURITY.AUDIT$JOURNAL file 
See Security audit log files 


SECURITY.SYS file 
See Volume security profile 
Security auditing, Part I, 11-12 
description, Part I, 17-16 
disabling events, Part I, 17-19 
displaying using SHOW AUDIT command, 
Part II, 17-17 
enabling operator terminal, Part IJ, 17—20 
Security audit log files, Part II, 17-2 
closing, Part II, 17-21 
creating, Part II, 17-21 
creating new version, Part II, 17-21 
review policy, Part II, 17-17 
Security class messages 
disabling, Part II, 17-14 
Security management, Part I, 6-14 
in SYSMAN on remote nodes, Part I, 2-12 
protecting queues, Part I, 138-22 to 13-27 
Security operator terminals, Part II, 17-20 
SECURITY_AUDIT.AUDIT$JOURNAL file 
See also Security audit log files 
moving to reduce system disk I/O, Part II, 16-8 
SELECT command 
in SHOW CLUSTER, Part IT, 19-13 
Selective dump, Part II, 15-38 
compared to physical dump, Part II, 15-8, 
15-10 
storing, Part II, 15-10 
SEQ (file sequence number) 


See File identification, file sequence number 
Sequential-disk save set, Part I, 10-6 
initializing, Part I, 10-7 
mounting, Part I, 10-7 
Server queues, Part I, 13-3 
Server queue status, Part I, 138-52 
Service 
bindings, Part II, 21-12 
nodes, Part II, 22-3 
password protection, Part II, 21-12 
write protection, Part II, 21-12 
Sessions 
maintaining on more than one terminal, Part 
I, 7-10 
maintaining when disconnecting a terminal, 
Part I, 7-10 
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SET (Field) command 
SHOW CLUSTER, Part II, 19-11 
SET ACCOUNTING command 
controlling which resources are tracked, Part 
IT, 18-3 
starting up a new accounting file, Part IJ, 18-3 
SET ACL command 
for vector capability (VAX), Part I, 24-8 
modifying disk file characteristics, Part I, 9-9 
modifying file characteristics, Part I, 9-9 
SET AUDIT command 
creating new version of security audit log file, 
Part II, 17-21 
on local node only, Part IJ, 17-21 
enabling security alarms, Part IJ, 17~20 
to create new version of security audit log file, 
Part IT, 17-21 
to enable security auditing, Part IJ, 17-16 
SET command 
in conversational boot, Part I, 4-6 
NCP, Part II, 20-8 
SET DEVICE command 
spooling printers, Part I, 7-13 
SET DIRECTORY command 
limiting disk space consumed, Part I, 8-8 
modifying directory characteristics, Part I, 
9-13 
modifying disk file characteristics, Part I, 9-9 
SET ENTRY command, Part I, 13-70 
changing forms, Part J, 13-81 
changing scheduling priority, Part I, 13-73 
holding jobs, Part I, 13-71, 13-72 
releasing jobs, Part I, 138-71 
requeuing pending jobs, Part I, 13-74 
specifying job retention, Part J, 13-74 
SET ENVIRONMENT command, Part I, 2-11 
SET FILE command 
example, Part I, 6-31 
modifying disk file characteristics, Part I, 9-9 
using to assign an alias, Part I, 9-10 
using to modify file characteristics, Part I, 
9-10 
SET FUNCTION command, Part II, 19-7 
in SHOW CLUSTER, Part II, 19-13 
SET HOST/LAT command, Part II, 22-1 
SET LOGINS command, Part IT, 16-4 
SET MAGTAPE command, Part I, 7~-16, 8—40 
SETPARAMS.DAT file, Part IT, 14-18 
SET PRINTER command, Part I, 7-12, 13-14 
in system startup, Part I, 5-11 
SET PROFILE command 
in SYSMAN, Part I, 2-13 
SET PROTECTION command, Part I, 9-10 
changing directory protection, Part I, 9-13 
modifying file characteristics, Part I, 9-9 
setting default protection, Part I, 9-8 
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SET QUEUE command, Part J, 138-54 
assigning a default form, Part I, 13-64 
assigning characteristics, Part I, 13-59, 13-81 
canceling characteristics, Part I, 13-59 
controlling page overflow, Part I, 18-45 
mounting a form, Part I, 13-64 
setting block limits, Part I, 138-33 
setting scheduling policy, Part I, 13-33 
setting UIC-based protection on queues, Part I, 
13-24 
specifying banner pages, Part I, 13-60 
specifying job processing options, Part I, 13-32 
specifying queue options with, Part J, 138-19 
specifying reset modules, Part I, 138-66 
SET QUORUM command . 
avoiding use of /CLUSTER with SYSMAN DO 
command, Part II, 19-19 
SET SECURITY/ACL command 
to specify or change ACLs, Part I, 9-13 
SET SECURITY command 
for queues, Part I, 13-24 
modifying file characteristics, Part I, 9-9 
SET/STARTUP command 
in conversational boot, Part I, 4-12 
SET TERMINAL command, Part I, 7-9, 138-14 
despooling a printer, Part I, 7~15 . 
determining characteristics of a LAT line, Part 
E711 
enabling virtual terminals, Part I, 7-10 
in system startup, Part J, 5-11, 7-9, 7-12 
setting printer characteristics, Part I, 7-12 
SET TIMEOUT command, Part I, 2-14 
Setting system parameters 


See Changing system parameters 
Setting up printers, Part I, 7-9, 7-12, 13-14 
in system startup, Part I, 5-11, 7-12 
LAT, Part I, 138-14 
Setting up terminals, Part I, 7-9, 7-12, 13-14 
in system startup, Part I, 5-11, 7-9 
using system parameters, Part I, 7-9 
Setup module, Part I, 138-45 
See also Device control modules 
specifying in forms, Part I, 13-43 
SET VOLUME command 
changing protection code, Part I, 8-18 
disabling high-water marking, Part II, 16-7 
encoding labels on volumes, Part I, 8-29 
modifying disk volume characteristics, Part I, 
8-29 
modifying file characteristics, Part I, 9-9 
performing data checks, Part I, 8-29 
specifying file retention periods, Part I, 8-52 
Shadow sets 
backing up, Part I, 10-38 
restoring, Part I, 10-43 


Shareable images, Part II, 16—11 
assigning logical names for, Part IJ, 16-17 
execute-only, Part II, 16-15 
Shared resource 
definition, Part II, 19-2 
Sheet-feed paper 
specifying in forms, Part I, 13-43 
SHOW ACCOUNTING command, Part II, 18-2 
SHOW ACL command, Part I, 9-5; Part II, 24-8 
SHOW AUDIT command 
to display event classes being audited, Part IJ, 
17-17 
SHOW CLUSTER command 
See Show Cluster utility 
Show Cluster utility (SHOW CLUSTER) 
controlling displays, Part I, 19-5 
defining keypad keys, Part II, 19-7 
refreshing the screen, Part IJ, 19-10 
reports, Part II, 19-4 
controlling displays, Part I, 19-10 
formatting, Part IT, 19-5, 19-11, 19-14 
initialization file, Part IT, 19-10 
using, Part II, 19-4 
SHOW command, Part I, 9-1 
in conversational boot, Part I, 4-6 
in SYSGEN, Part II, 14-32 
SHOW CPU command, Part II, 24-3, 24—9 
SHOW DEVICES command, Part I, 7-2, 7-15, 
9-5 
checking mounted volumes, Part I, 8-36 
determining the status of files, Part I, 8-42; 
Part II, 16-18 
devices not shown, Part I, 7-6 
examples, Part I, 7-2 
for ISO-9660 formatted devices, Part I, 7-4 
SHOW ENTRY command, Part I, 13-69 
SHOW ENVIRONMENT command, Part I, 2-11 
Showing system parameters 
with conversational boot, Part I, 4-6 
with SYSGEN, Part II, 14-31 
with SYSMAN, Part II, 14-27 
SHOW MAGTAPE command, Part I, 7-15 
SHOW MEMORY command 
determining size of page and swap files, Part 
IT, 15-21 
displaying page and swap files, Part IT, 15-5 
monitoring page file usage, Part I, 15-5 
monitoring swap file usage, Part II, 15-9 
showing the size of nonpaged pool, Part II, 
24-7 
SHOW PROCESS command, Part I, 9-5; Part II, 
24-9 
SHOW PROFILE command 
in SYSMAN, Part I, 2-13 
SHOW PROTECTION command, Part I, 9-5, 9-6 
SHOW QUEUE command 
showing all jobs, Part I, 13-51 
showing batch jobs, Part I, 138-51 


SHOW QUEUE command (cont’d) 
showing brief information, Part I, 13-51 
showing complete information, Part I, 18-51 
showing completion status for jobs, Part I, 
13-28 
showing files associated with a job, Part I, 
13-51 
showing generic queues, Part I, 13-51 
showing jobs of a specified status, Part I, 13-51 
showing output execution queues, Part I, 
13-51 
showing queue status, Part I, 13-50 
showing total number of jobs, Part I, 13-51 
SHOW QUEUE/MANAGER command, Part I, 
12-11 
SHOW QUOTA command, Part I, 8-50 
SHOW SECURITY command 
for queues, Part I, 13-24 
SHOW/STARTUP command 
in conversational boot, Part I, 4-12 
SHOW_CLUSTERS$INIT.COM command 
procedure, Part II, 19-14 
SHOW_CLUSTERSINIT logical name, Part II, 
19-14 
Shutdown 
See SHUTDOWN.COM command procedure 
See System shutdown 
SHUTDOWN$DISABLE_AUTOSTART logical 
name, Part J, 4-33, 13-57 
SHUTDOWN$INFORM_NODES logical name, 
Part I, 4-33 
SHUTDOWN$MINIMUM_MINUTES logical 
name, Part I, 4-33 
SHUTDOWNS$TIME logical name, Part I, 4-33 
SHUTDOWN$VERBOSE logical name, Part I, 
4-33 
SHUTDOWN.COM command procedure, Part I, 
4-27 
See also System shutdown 
customizing 
with logical names, Part I, 4-33 
with various methods, Part I, 4—32 
defining the minimum number of minutes 
before shutdown, Part I, 4-83 
example, Part I, 4—30 
executing with SYSMAN, Part I, 4-34 
how to use, Part I, 4-28 
options 
automatic reboot, Part I, 4-29 
manual reboot, Part I, 4—29 
time of shutdown, Part I, 4-33 
order of events, Part I, 4-31 
required privileges, Part I, 4-27 
when to use, Part I, 4-27 
Site-independent startup command procedure 


See STARTUP.COM command procedure 
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Site-specific products 
startup database, Part I, 5-18 
Site-specific shutdown command procedure 
SYSHUTDWN.COM, Part I, 4-27 
Site-specific startup command procedure, Part I, 
5-3 
announcements, Part I, 5-13 
.COM version, Part I, 5-3 
creating your own, Part I, 5-2 
definition, Part I, 5-2 
modifying to perform site-specific operations, 
Part I, 5-2 
order of execution, Part I, 4—4, 5-2 
required location, Part I, 5-8 
rules for modifying, Part I, 5-3 
SATELLITE_PAGE.COM 
See SATELLITE_PAGE.COM command 
procedure 
SYCONFIG.COM 
See SYCONFIG.COM command procedure 
SYLOGICALS.COM 
See SYLOGICALS.COM command 
procedure 
SYPAGSWPFILES.COM 
See SYPAGSWPFILES.COM command 
procedure 
SYSECURITY.COM 
See SYSECURITY.COM command 
procedure 
SYSTARTUP_VMS.COM 
See SYSTARTUP_VMS.COM command 
procedure 
-TEMPLATE version, Part I, 5-3 
use in VMSKITBLD, Part I, 5-3 
versions of, Part I, 5-3 
Slicing images, Part I, 16-12 
SMISERVER process, Part I, 2-9 
attributes of, Part I, 2-13 
changing, Part I, 2-13 
starting, Part I, 2-9 
in system startup, Part I, 5-5 
SMP (symmetric multiprocessing) 
See Multiprocessing 
SMP_CPUS system parameter, Part II, 24-3, 
24-5 
Snapshot 
See Snapshot facility 
Snapshot facility 
concepts, Part I, 4-19 
preparing system for, Part I, 4-20 
preparing system startup files for, Part I, 4-21 
required process limits, Part I, 4-21 
supported applications, Part I, 4-21 
when using with DECwindows, Part I, 4—22 
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Software errors 
OPCOM failure, Part I, 2-19 
queue manager, Part I, 12-14 
when booting, Part I, 4-16 


Software installation 
See Installing software 
Software license 
definition, Part I, 3-5 
Software Performance Reports 
See SPRs 
Sort/Merge utility (SORT/MERGE) 
optimizing batch queues for, Part I, 138-32 
Source 
VMSINSTAL.COM parameter, Part I, 3-8 
Spawn mode 
as execution mode for a startup procedure, 
Part I, 5-18 
Spooled printers 


See Printers, spooled 
SPRs (Software Performance Reports) 
including system dump file with, Part IT, 15-2, 
15-11 
submitting to report system failure, Part II, 
15-11 
STABACKIT.COM command procedure, Part I, 
10-45, 10-46 
Stalled job status, Part I, 138-70 
Stalled queues 
status, Part I, 13-52, 13-80, 13-81 
troubleshooting, Part J, 13-81 
Standalone BACKUP 
backing up the system disk, Part I, 5-33 
booting, Part I, 10-45, 10-47 
building, Part I, 5-33, 10-44, 10-46 
definition, Part I, 10-44 
locations of, Part I, 5-33 
relation to Backup utility, Part I, 10-44 
using to back up the system disk, Part I, 
10-44, 10-48, 10-51 
using to restore the system disk, Part I, 10-50 
START/CPU command, Part II, 24-3, 24-6 
Starting InfoServer Client for OpenVMS, Part II, 
21-10 
Starting queues, Part I, 138-4 
autostart, Part I, 13-49 
in startup command procedure, Part I, 
13-18 
relationship to activating an autostart 
queue, Part I, 13-4 
nonautostart, Part I, 18-16, 13-49 
in startup command procedure, Part I, 
13-18 
Starting queue status, Part J, 13-52 
Starting the LAT software 
with LAT$STARTUP.COM, Part I, 5-14; Part 
IT, 22-9 


Starting the queue manager, Part I, 12-7 
initially, Part I, 12—7 
restarting, Part I, 12-9 
STARTNET.COM command procedure, Part I, 
5-15, 7-7 
START/QUEUVE command, Part I, 138-18 
activating an autostart queue, Part I, 13-50 
assigning a default form, Part I, 13-64 
assigning characteristics, Part I, 138-59 
canceling characteristics, Part I, 13-59 
controlling page overflow, Part J, 13-45 
mounting a form, Part I, 138-64 
resuming printing of a suspended job, Part I, 
138-76 
setting block limits, Part I, 13-33 
setting scheduling policy, Part I, 138-33 
setting UIC-based protection on queues, Part I, 
13-24 
specifying autostart information, Part I, 13-15 
specifying banner pages, Part J, 13-60 
specifying job processing options, Part I, 138-32 
specifying queue options with, Part I, 13-19 
specifying reset modules, Part I, 13-66 
starting a generic queue, Part I, 13-17 
starting a nonautostart queue, Part I, 13-49 
START/QUEUE/MANAGER command, Part I, 
12-7, 12-9 
caution, Part I, 12-8 
creating an additional queue manager, Part I, 
12-10 
creating a queue database, Part I, 12-7 
specifying failover list, Part I, 12-9 
specifying name of queue manager, Part I, 
12-10 
specifying nodes to run the queue manager, 
Part I, 12-6 
storage of, Part I, 12-7 
STARTUP$AUTOCONFIGURE_ALL symbol, 
Part I, 7-8 
STARTUP$INTERACTIVE_LOGINS symbol, Part 
I, 5-15 
STARTUP$STARTUP_LAYERED logical name, 
Part I, 5-17 
STARTUP$STARTUP_VMS logical name, Part I, 
5-17 
STARTUP.COM command procedure, Part I, 4-4, 
5-2 
configuring devices, Part I, 5-7, 7-5 
definition, Part I, 5-2 
description, Part I, 4-12 
if it does not execute, Part I, 4-16 
message indicating execution of, Part I, 4-5 
tasks performed by, Part I, 4-4, 4-12; Part II, 
16-10 
STARTUP command, Part I, 2-9 
See also Startup database 
in SYSMAN, Part I, 5-16 


Startup command procedure 
See also Site-specific startup command 
procedure 
See also STARTUP.COM command procedure 
booting without, Part I, 4-8 
changing execution mode, Part I, 5-20 
changing node restrictions, Part I, 5-20 
changing startup phase, Part I, 5-20 
creating your own, Part I, 7-9, 7-12 
enabling a temporarily disabled, Part J, 5-21 
known file lists, Part I, 5-12 
modifiable 
See Site-specific startup command 
procedure 
node restriction, Part I, 5-18 
passing parameters to, Part I, 5-18 
preventing from executing, Part I, 5-20 
temporarily, Part I, 5-21 
required 
See STARTUP.COM command procedure 
SATELLITE_PAGE.COM 
See SATELLITE_PAGE.COM command 
procedure 
setting up output devices, Part I, 138-14 
site-independent 
See also STARTUP.COM command 
procedure 
specifying an alternate, Part I, 4-12 
as the default, Part I, 4-13 
site-specific, Part I, 5-3 
See also Site-specific startup command 
procedure 
specifying execution mode, Part I, 5-19 
specifying node restrictions, Part I, 5-19 
specifying startup phase, Part I, 5-19 
starting queues, Part I, 13-18 
SYCONFIG.COM 
See SYCONFIG.COM command procedure 
SYLOGICALS.COM 
See SYLOGICALS.COM command 
procedure 
SYPAGSWPFILES.COM 
See SYPAGSWPFILES.COM command 
procedure 
SYSECURITY.COM 
See SYSECURITY.COM command 
procedure 
when errors prevent you from logging in, Part 
I, 4-8 
Startup database 
adding files to, Part I, 5-19 
changing information in, Part I, 5-20 
definition, Part I, 5-17 
deleting records in, Part I, 5-20 
disabling files in, Part I, 5-21 
reenabling disabled files in, Part I, 5-21 
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Startup database (cont'd) 
restriction, Part I, 5-20 
showing contents of, Part I, 5-19 
showing name of the target, Part I, 5-19 
specifying the current, Part I, 5-19 
Startup phases 
determining order of, Part I, 5-17 
layered product, Part I, 5-17 
END, Part I, 5-18 
LPBEGIN, Part I, 5-18 
LPBETA, Part I, 5-18 
LPMAIN, Part I, 5-18 
specifying, Part I, 5-19 
operating system 
BASEENVIRON, Part I, 5-4 
CONFIGURE, Part I, 5-4 
DEVICE, Part I, 5-4 
INITIAL, Part I, 5-4 
Startup restrictions . 
InfoServer Client for OpenVMS software, Part 
IT, 21-11 
PATHWORKS, Part I, 21-11 
RSM, Part II, 21-11 
SYSMAN, Part II, 21-11 
STARTUP SET OPTIONS command, Part I, 4-15 
STARTUP SHOW OPTIONS command, Part J, 
4-16 
STARTUP_P1 system parameter, Part I, 4—13 
STARTUP_P2 system parameter, Part I, 4-14 
SYSMAN startup logging, Part I, 4-15 


Status of jobs 


See Job status 
Status of queues 
See Queue status 
Stock 
See also Forms 
commands used with, Part I, 13-61 
mismatch, Part I, 138-43 
troubleshooting, Part I, 13-80 
specifying, Part I, 13-43 
STOP/CPU command, Part IJ, 24-3, 24-6 
Stopped queue status, Part I, 18-52, 13-80 
Stop pending queue status, Part I, 13-52 
Stopping queues, Part I, 138-55 
abruptly, Part I, 18-55 
all queues on a node, Part I, 12-9, 13-56 
smoothly, Part I, 18-55 
Stopping queue status, Part I, 18-52 
Stopping the queue manager, Part I, 12-9 
STOP/QUEUVE command, Part I, 138-54, 18~76 
STOP/QUEUE/MANAGER/CLUSTER command, 
Part I, 12-9 
STOP/QUEUE/NEXT command, Part I, 13-50, 
138-55 
with autostart queues, Part I, 13-55 
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STOP/QUEUE/RESET command, Part I, 13-50, 
18-55 
with autostart queues, Part I, 13-55 
STOP/QUEUES/ON_NODE command, Fart I, 
12-9 
entering before shutting down a system, Part 
I, 13-56 
relationship to DISABLE AUTOSTART 
/QUEUES command, Part I, 138-56 
Storage bit map file 
BITMAP.SYS, Part IT, A-8 
description, Part IJ, A-8 
reserved file, Part II, A-8 
storage control block (SCB), Part II, A-8 
Storage control block (SCB) 
in storage bit map file, Part IJ, A-8 
SUBMIT command 
preventing users from executing, Part I, 138-54 
processing of, Part I, 13-2 
specifying characteristics, Part I, 138-28 
specifying job retention, Part J, 138-74 
specifying scheduling priority, Part I, 13-73 
SUBMON.COM command procedure 
sample, Part II, 17-32 
used with Monitor utility, Part IT, 17-31 
Subprocesses 
subprocess creation limit, Part I, 6-2, 6-40 
Substituting volumes, Part I, 8-27 
Subsystem ACEs 
-example, Part J, 11-10 
Subsystems 
protected, Part I, 8-28 
Supervisor mode 
logical names, Part II, 16-14 
Suspending a job, Part I, 13-76 
SWAPFILE.SYS file, Part II, 15-4 
See also Swap files 
SWAPFILEn_NAME symbol, Part II, 15-15, 
15-22 
SWAPFILEn_SIZE symbol, Part II, 15-15, 15-22 
Swap files 
changing sizes 
with SWAPFILES.COM, Part I, 15-23 
creating 
with AUTOGEN, Part II, 15-15, 15-22 
with SYSGEN, Part II, 15-16 
definition, Part I, 15-4 
deleting after creating a new version, Part II, 
15-25 
displaying, Part IT, 15-5 
displaying the size calculated by AUTOGEN, 
Part IT, 15-15, 15-20 
fragmentation of, Part I, 15-24 
installing 
in system startup, Part I, 5-4, 5-5; Part 
IT, 15-5, 15-17, 15-18 
when resized with AUTOGEN, Part II, 
15-16, 15-20 


Swap files 


installing (cont’d) 
with SYPAGSWPFILES.COM procedure, 
Part II, 15-18 
with SYSGEN, Part II, 15-17 
location 
specifying for individual files, Part II, 
15-22 
message indicating high fragmentation, Part 
IT, 15-24 
monitoring usage of, Part II, 15-5, 15-9 
mounting disk during system startup, Part I, 
5-5; Part II, 15-18 
moving to improve performance, Part II, 16-8 
on a satellite, Part IT, 15-18 
primary, Part II, 15-5 
purging, Part II, 15-25 
requirements 
location, Part II, 15-5 
secondary, Part II, 15-5, 15-18 
size 
See Swap file sizes 
tasks for managing, Part II, 15-1 
VMScluster satellite node, Part I, 5-6 


SWAPFILES.COM command procedure 


changing size of primary page, swap, and dump 
files, Part II, 15-23 


Swap file sizes 


calculating 
manually, Part II, 15-9 
with AUTOGEN, Part II, 15-5 
changing 
recommended method, Part I, 15-20 
when to increase, Part II, 15-9 
with AUTOGEN, Part II, 15-20 
with SYSGEN, Part IT, 15-24 
determining current, Part II, 15-21 
displaying AUTOGEN’s calculations, Part II, 
15-15, 15-20 
specifying 
for individual files, Part IJ, 15-20, 15-22 
total for multiple files, Part II, 15-20, 
15-21 
when to increase, Part II, 15-9 


SWAPFILE symbol, Part I, 15-21 
Swapping 


to move information between physical memory 
and files stored on disk, Part I, 15-4 


SYCONFIG.COM command procedure, Part I, 


5-2 

AUTOGEN failure, Part I, 7-8 

configuring devices, Part I, 7-5 

in startup, Part I, 5-4 

modifying to connect special devices, Part I, 
5-7 

modifying to mount disks early, Part I, 5-11 

STARTUP$AUTOCONFIGURE_ALL symbol, 
Part I, 7-8 


SYLOGICALS.COM command procedure, Part I, 
5-2, 5-7 
in system startup, Part I, 5-4 
mounting the queue database disk, Part I, 
12-6 
redefining location of master file of queue 
database, Part I, 12-6 
redefining location of system files, Part II, 16-8 
to specify default state of operator log files, 
Part II, 17-14 
SYLOGICALS.COM procedure 
mounting the queue database disk, Part I, 
12-6 
SYLOGIN.COM command procedure, Part I, 5-2, 
5-16 
defining announcements in, Part I, 5-13 
Symbionts, Part I, 138-54 
bypass formatting, Part I, 13-45 
communicating with, Part I, 138-76 
default, Part I, 138-38 
determining, Part I, 13-79 
for LAT printers, Part I, 18-3, 13-79 
function of, Part I, 12-8, 13-2 
LATSYM, Part I, 13-3, 13-79 
PRTSMB on LAT printers, Part I, 13-79 
role in processing print jobs, Part I, 13-3 
user-written, Part I, 13-3 
Symbols 
See also Logical names 
defining in MODPARAMS.DAT file, Part IJ, 
14-18, 15-15 
for page, swap, and dump file sizes, Part IJ, 
15-16, 15-21 to 15-22 
for system parameters, Part IJ, 14-18 
NUM_ETHERADAPT, Part IT, 14-21 
NUM_NODES, Part II, 14-21 
PAGEFILEn_NAME, Part I, 15-15 
PAGEFILEn_SIZE, Part II, 15-15 
STARTUP$AUTOCONFIGURE_ALL, Part I, 
7-8 
STARTUP$INTERACTIVE_LOGINS, Part I, 
5-15 
SWAPFILEn_NAME, Part I, 15-15 
SWAPFILEn_SIZE, Part IT, 15-15 
Symmetric multiprocessing 
See Multiprocessing 
Symmetric vector processing configuration, Part 
IT, 24-4 
SYPAGSWPFILES.COM command procedure, 
Part I, 5-2; Part I, 15-17, 15-18 
execution of during system startup, Part I, 5-5 
modifying to install page and swap files, Part 
T, 5-5 
SYS$ANNOUNCE logical name, Part I, 5-13 
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SYS$AUDIT_SERVER_INHIBIT logical name, 
Part I, 5-9; Part II, 17-18 
SYS$BATCH default queue name, Part I, 13-5 
SYS$DECDTM_INHIBIT logical name, Part II, 
23-19 
SYS$ERRORLOG logical name 
defining during system startup, Part J, 5-8 
defining to reduce system disk I/O, Part II, 
16-8 
SYS$JOURNAL logical name, Part IT, 23-1 
SYS$MONITOR logical name 
defining during system startup, Part I, 5-8 
defining to reduce system disk I/O, Part IJ, 
16-8 
SYS$PRINT default queue name, Part I, 13-8 
SYS$QUEUE_MANAGER.QMAN$JOURNAL file 
See Journal file of queue database 
SYS$QUEUE_MANAGER.QMAN$QUEUES file 
See Queue file of queue database 
SYS$QUEUE_MANAGER queue manager 
as default queue manager, Part I, 12-4 
SYS$STARTUP logical name, Part I, 4-4, 5-2, 
5-17 
SYS$SYLOGIN logical name, Part I, 5-16 
SYS$SYSTEM:NETNODE_REMOTE.DAT file 
changing location of, Part I, 20-7 
contains configuration database, Part II, 20-7 
SYS$TIMEZONE_DIFFERENTIAL logical name, 
Part I, 5-30 
SYS$UPDATE logical name 
with VMSINSTAL.COM, Part I, 3-6 
SYS$WELCOME logical name, Part I, 5-14 
SYSBOOT 
See Conversational boot 
SYSBOOT.EXE file, Part I, 4-2 
SYSDUMP.DMP file, Part IT, 15-2 
See also System dump files 
protection, Part II, 15-4 
required location, Part II, 15-3 
SYSECURITY.COM command procedure, Part I, 
5-2, 5-3, 5-9 
execution of during system startup, Part I, 5-5 
SYSE root 
on system disk, Part I, 5-33 
SYSGEN 
See System Generation utility 
SYSGEN parameters 
See System parameters 
SYSHUTDWN.COM command procedure, Part J, 
4-27 
SYSLOST directory 
lost files in, Part J, 8-55 
SYSMAN 
See System Management utility 
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SYSMANINI logical name, Part I, 2-15 
SYSPRV privilege, Part I, 11—7 
SYSTARTUP_VMS.COM command procedure, 
Part I, 5-9 
creating systemwide announcements, Part I, 
5-13 
defining announcements in, Part I, 5-13 
defining location of systemwide login procedure, 
Part I, 5-16 
disabling error checking in, Part I, 5-10 
enabling autostart, Part I, 5-11 
freeing page file of dump information, Part II, 
15-4, 15-14 
installing known images, Part I, 5-12; Part II, 
16-10 
installing resident images (AXP), Part I, 5-12 
invoking LAT command procedures, Part I, 
5-14 
invoking the System Dump Analyzer utility, 
Part IT, 15-138 
limiting the number of interactive users, Part 
I, 5-15 
making remote InfoServer devices available, 
Part II, 21-13 
making remote InfoServer disks available, Part 
I, 5-12 
message indicating execution of, Part I, 4—5 
modifying to perform site-specific operations 
during system startup, Part I, 5-9 
operations performed in, Part I, 5-9 
purging the operator log file, Part I, 5-13 
saving contents of system dump file in, Part I, 


15-13 

setting printer device characteristics, Part I, 
5-11, 7-12 

setting terminal device characteristics, Part I, 
5-11, 7-9 


special consideration about operator assistance 
for MOUNT command, Part I, 5-11 
starting InfoServer Client for OpenVMS, Part 
I, 5-12; Part II, 21-10 
starting queues, Part I, 5-11 
submitting batch jobs from, Part I, 5-18 
System (security category), Part I, 11-7 
SYSTEM account 
changing passwords for security of, Part I, 2-7 
exercising caution with privileges, Part I, 2-7 
initial modification, Part I, 6—7 
in UAF, Part I, 6-8 
logging in to, Part I, 2-7 
setting process quotas for efficient backups, 
Part I, 10-8 
using AUTHORIZE to modify process limits, 
Part I, 3-5 
System console 
? message, Part I, 4-16 


System crash 


See CRASH.COM procedure 
See Crash dumps 
See System failures 


System directories 


restoring original names 
before upgrading, Part I, 3-3 


System disks 


adding an alternate root directory, Part I, 2-27 

automatic mounting of, Part I, 5-10 

backing up, Part I, 5-33, 10-43, 10-48, 10-51 

backing up after installation, Part I, 3-11 

backing up for software installations, Part I, 
3-4 

booting from an alternate, Part I, 4-3 

building standalone BACKUP on, Part I, 5-33 

building with VMSKITBLD, Part I, 2—23 

completing a disk created with VMSKITBLD, 
Part I, 2-25 

configuring a system root added with 
VMSKITBLD, Part I, 2-29 

copying system files from, Part I, 2-23 

copying system files using VMSKITBLD, Part 
I, 2-26 

creating a backup copy, Part I, 5-33 

fragmentation of, Part IT, 15-24 

installing software on alternate, Part I, 3-15 

moving files off to improve system performance, 
Part IT, 16-8 

moving page and swap files off, Part I, 15-5 

not in volume sets, Part I, 8-30 

quotas for, Part I, 8-48 

removing and adding optional system files, 
Part I, 5-1 

restoring, Part I, 10-50 

saving space by removing optional files, Part I, 
5-1 

saving space on, Part I, 15-5 

SYSE root, Part I, 5-33 


System Dump Analyzer utility (SDA) 


analyzing the system dump file, Part II, 15-2 

in system startup, Part I, 5-12; Part I, 
15-4, 15-11 

COPY command, Part II, 15-13 

determining cause of system failure, Part II, 
15-11 

freeing dump information from the page file, 
Part II, 15-14 

saving contents of system dump file, Part IJ, 
15-13 


System dump files 


See also Crash dumps 

See also SYSDUMP.DMP file 
See also System dump file sizes 
See also System failures 
analyzing, Part II, 15-11 
calculating size, Part II, 15-6 


System dump files (cont’d) 


comparison of contents of physical and selective 
dumps, Part I, 15-3, 15-10 

copying with BACKUP, Part II, 15-4, 15-12 

default location, Part I, 15-2 

definition, Part II, 15-2 

deleting after creating a new version, Part II, 
15-25 

displaying the size calculated by AUTOGEN, 
Part I, 15-15, 15-20 

freeing page file, Part II, 15-4 

information captured in, Part II, 15-2 

installing 
automatically, Part II, 15-2 
when resized with AUTOGEN, Part II, 

15-16, 15-20 

insufficient disk space, Part I, 15-10 

investigating cause of system failure, Part II, 
15-11 

lack of, Part IT, 15-2 

overwriting of, Part I, 15-2 

protecting with UIC security, Part IT, 15-4 

requirements, Part JI, 15-3 
location, Part II, 15-3 
size, Part II, 15-3 

saving contents on reboot, Part I, 5-12; Part 
I, 15-13 

saving minimal information in, Part I, 15-10 

size 
See System dump file sizes 

storing selective portions of memory, Part II, 
15-10 

tasks for managing, Part I, 15-1 

use of page file for, Part I, 15-2 


System dump file sizes 


calculating 
manually, Part II, 15-6 
with AUTOGEN, Part II, 15-2 
changing 
recommended method, Part II, 15-20 
with AUTOGEN, Part IJ, 15-10, 15-20 
with SYSGEN, Part I, 15-24 
displaying AUTOGEN’s calculations, Part II, 
15-15, 15-20 
minimizing, Part I, 15-10 
required, Part I, 15-3 
for page file, Part II, 15-3 


System failures, Part IT, 15-2 


See also Crash dumps 

See also System dump files 

determining cause, Part IJ, 15-2, 15-11 

reporting with a Software Performance Report, 
Part II, 15-11 

saving contents of system dump file after, Part 
I, 5-12; Part IT, 15-13 

writing of system dump file, Part IT, 15-2 
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System files 
duplicating using VMSKITBLD, Part I, 2-23 
moving off system disk to improve performance, 
Part IT, 16-8 
on public volumes, Part I, 8-8 
System Generation utility (SYSGEN) 
and version checking, Part I, 5-22 
AUTOCONFIGURE command (VAX) 
in system startup, Part I, 5-7 
changing page, swap, and dump file sizes, Part 
IT, 15-20, 15-24 
changing system parameter file with, Part II, 
14-33 
changing system parameters, Part II, 14-33, 
17-11 
See also System parameters, changing 
configuring devices 
in system startup, Part I, 5-7 
CONNECT command (VAX), Part I, 7-6 
in system startup, Part I, 5-7 
converting parameters for use with AUTOGEN, 
Part I, 14-5 
CREATE command, Part IJ, 15-16, 15-24 
creating a new system parameter file, Part I, 
14-35 
creating page, swap, and dump files, Part IJ, 
15-16 
INSTALL command, Part II, 15-17 
in SYPAGSWPFILES.COM, Part II, 15-18 
in system startup, Part I, 5-6 
installing page, swap, and dump files, Part II, 
15-17 
in SYPAGSWPFILES.COM, Part I, 15-18 
installing page, swap and dump files 
in system startup, Part J, 5-6 
LOAD command (VAX), Part I, 7-6 
managing system parameters, Part II, 14-4 
operator log messages, Part IJ, 17-11 
showing system parameters, Part II, 14-31 
System libraries 
decompressing, Part II, 16-6 
System management 
centralizing with SYSMAN, Part I, 2-8 
creating access control lists (ACLs), Part J, 
11-8 
on multiple nodes, Part I, 2-10 
tasks 
clusterwide management, Part II, 19-3 
establishing node in network, Part II, 20-8 
System Management utility (SYSMAN) 
accessing disks, Part I, 8-49 
adding startup files to a startup database, Part 
I, 5-19, 5-20 
ALF commands, Part I, 6-29 
authorization checks in, Part I, 2-12 
changing privileges in, Part I, 2-13 
changing system parameters 
active values, Part II, 14—28 
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System Management utility (SYSMAN) (cont’d) 


command verification in, Part I, 2—14 

configuring devices (AXP) 
in system startup, Part I, 5-7 

converting parameters for use with AUTOGEN, 
Part IT, 14-5 

creating command procedures for, Part I, 2-15 

deleting startup files, Part I, 5-20 

disabling startup files, Part I, 5-21 

DISKQUOTA commands, Part I, 8-48 

disk quotas with, Part I, 8-47 

Disk Quota utility, Part I, 8-48 

DO command, Part J, 2-14 

enabling remote systems to execute commands, 
Part I, 2-9 

enabling startup files, Part I, 5-21 

features of, Part I, 2-8 

how commands execute, Part J, 2-8 

initialization file, Part I, 2-15 

IO AUTOCONFIGURE command (AXP) 
in system startup, Part I, 5-7 

IO CONNECT command (AXP), Part I, 7-7 
in system startup, Part I, 5-7 

IO LOAD (AXP), Part I, 7-7 

loading licenses with, Part I, 3-6 

management environment, Part I, 2-9 

managing a VMScluster, Part II, 19-16 to 
19-21 

managing startup, Part I, 5-16 

managing system parameters, Part II, 14-4, 
14-25 

modifying the system parameter file, Part IJ, 
14-27 

PARAMETERS command, Part II, 14-25 
summary, Part II, 14—25 

privileges required, Part I, 2~8 

profile, Part I, 2-12 
adjusting, Part J, 2-13 

showing system parameters, Part II, 14-27 

showing the contents of a startup database, 
Part I, 5-19 

showing the name of the target startup 
database, Part I, 5-19 

shutdown, Part I, 4-34 

SMISERVER process, Part I, 2-9 

specifying the current startup database, Part I, 
5-19 

STARTUP command, Part I, 5-16 

startup logging, Part I, 4-15 

startup restrictions, Part IJ, 21-11 

timeout periods, Part I, 2-14 

use of passwords, Part I, 2-10, 2-12 

using logical names in, Part J, 2-11 

using to centralize system management, Part 
I, 2-8 

System messages 
See also Messages 
using when managing a sytem, Part I, 2-2 


System parameters 
See also Parameter files 
ACP cache system, Part I, 8-41 
active values, Part I, 14-3, 14-26 
affected by AUTOGEN calculations, Part II, 
14-10 
ALPHAVMSSYS.PAR file (AXP), Part I, 14-3 
automatic setting by AUTOGEN, Part II, 14-3 
booting with default, Part I, 4—7 
categories by function, Part II, 14-2 
changing 
checking AUTOGEN’s settings, Part II, 
14-10 
editing MODPARAMS.DAT file, Part II, 
14-18 
recommended method, Part II, 14-4, 14-18 
specifying values in MODPARAMS.DAT 
file, Part I, 14-4 
with AUTOGEN, Part I, 14-18 
with conversational boot, Part I, 4-3, 4-6; 
Part II, 14-386 
with SYSGEN, Part IT, 14-33 
with SYSMAN, Part II, 14-27, 14-28 
checking before using VMSINSTAL.COM, Part 
I, 3-5 
controlling 
increasing, Part II, 14-18 
in MODPARAMS.DAT file, Part I, 14-4, 
14-18 
specifying absolute values, Part II, 14-19 
specifying maximum values, Part II, 14-20 
specifying minimum values, Part II, 14—20 
with ADD_ prefix, Part IJ, 14-18 
with MAX_ prefix, Part II, 14-20 
with MIN_ prefix, Part I, 14-20 
creating a new parameter file 
with SYSGEN, Part IT, 14-35 
current values, Part II, 14-3, 14-26 
default values, Part I, 14-3 
definition, Part I, 14-1 
DUMPBUG, Part II, 15-3 
DUMPSTYLE, Part II, 15~3, 15-10 
dynamic, Part ITI, 14-3 
effect on other parameters, Part I, 14-4 
ERLBUFFERPAGES, Part II, 15-6 
ERRORLOGBUFFERS, Part II, 15-6 
file extensions, Part II, 16-7 
GBLPAGES, Part I, 16-11 
GBLSECTIONS, Part IT, 16-11 
initialization at boot time, Part II, 14-36 
in memory 
See Active system parameters 
MODPARAMS.DAT file 
See MODPARAMS.DAT file 
MULTIPROCESSING, Part II, 24—3 
MVTIMEOUT, Part I, 8-58, 8-60 
NPAGEDYN, Part II, 24-7 


System parameters (cont'd) 
on disk, Part II, 14-3 
See Current system parameters 
in ALPHAVMSSYS.PAR file (AXP), Part II, 
14-36 
in VAXVMSSYS.PAR file (VAX), Part IT, 
14-36 
parameter files 
See Parameter files 
QUANTUM, Part II, 24-8 
recommended method for changing, Part II, 
14-4, 14-5 
RMS_EXTEND_SIZE, Part II, 16-7 
SAVEDUMP, Part IT, 15-2, 15-3 
SCSNODE, Part I, 21-10 
showing 
with conversational boot, Part I, 4—3, 4-6; 
Part IT, 14-36 
with SYSGEN, Part IT, 14-31 
with SYSMAN, Part I, 14-27 
SMP_CPUS, Part IT, 24-3, 24-5 
STARTUP_P1, Part I, 4-13 
STARTUP_P2, Part I, 4-14 
storing your changes for use with AUTOGEN, 
Part IT, 14-5 
symmetric multiprocessing, Part IT, 24-3 
TAPE_MVTIMEOUT, Part I, 8-58, 8-60 
tasks for managing, Part II, 14—1 
TTY_DEFCHAR, Part I, 7-9 
TTY _DEFCHAR2, Part I, 7-9, 7-10 
types of, Part II, 14-2 
dynamic, Part II, 14-2 
general, Part II, 14-2 
major, Part II, 14-2 
UAFALTERNATE, Part I, 4-10 
user definable, Part II, 14-3 
VAXVMSSYS.PAR file (VAX), Part IT, 14-3 
vector processing, Part II, 24-5 
VECTOR_MARGIN, Part II, 24—7 
VECTOR_PROC, Part II, 24-5 
VIRTUALPAGECNT, Part I, 13-33 
when incorrect values prevent the system from 
booting, Part I, 4—7 
WSMAX, Part I, 138-31; Part II, 24—7 
System passwords, Part I, 11-3 
dictionary of, Part J, 11-2 
System shutdown 
See also SHUTDOWN.COM command 
procedure 
adjusting quorum when shutting down a node, 
Part I, 4—29 
after software installation, Part I, 3-11 
allowing batch and print jobs to complete 
before, Part I, 13-56 
caution about timing of system halt, Part II, 
15-2 
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System shutdown (cont'd) 


checking for existence of system files before, 
Part I, 4-29 
customizing, Part I, 4—32 
with SYSHUTDWN.COM command 
procedure, Part I, 4-27 
defining the minimum number of minutes 
before shutdown, Part I, 4—33 
emergency procedure 
CRASH, Part I, 4-27 
OPCCRASH, Part I, 4-27, 4-36 
for an entire VMScluster, Part I, 4—29 
notification of, Part I, 4—33 
options 
automatic reboot, Part I, 4—29 
manual reboot, Part I, 4-29 
specifying time interval between DISABLE 
AUTOSTART/QUEUES and STOP 
/QUEUES/ON_NODE commands, Part 
I, 138-57 
time of shutdown, Part I, 4-33 
orderly, Part I, 4-27 
order of events, Part I, 4—31 
procedures for performing, Part I, 4-27 
saving AUTOGEN feedback data, Part I, 4-29 
SHUTDOWN.COM, Part I, 4-27 
example, Part I, 4-30 
how to use, Part I, 4-28 
when to use, Part I, 4-27 
stopping queues before, Part I, 13-56 
with SYSMAN, Pari I, 4-34 


System startup 


See also Booting 


See also Site-specific startup command 
procedure 

See also Startup command procedure 

See also Startup phases 

analyzing a crash dump, Part I, 5-12 

assigning systemwide logical names, Part J, 
5-7 

booting with minimum, Part I, 4-13 

CONFIGURE phase, Part I, 7-5 

configuring devices, Part I, 4-4, 7-5 
special (AXP), Part I, 5-7 
special (VAX), Part I, 5-7 

controlling when booting, Part I, 4-11 

creating systemwide announcements, Part I, 
5-13 

databases, Part I, 5-17 

defining location of systemwide login procedure, 
Part I, 5-16 

definition of logical names, Part I, 5-4 

description, Part I, 4-12 

determining order of phases, Part I, 5-17 

displaying startup commands as they execute, 
Part I, 4-14 

enabling autostart, Part I, 5-11 
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System startup (cont'd) 


enabling operator console, Part I, 5-5 
enabling operator log file, Part I, 5-5 
events, Part I, 4-4 
order of, Part I, 5-4 
possibility of future change in order, Part 
I, 5-5 
execution of AUTOCONFIGURE command, 
Part I, 5-4 
execution of login procedures, Part I, 5-16 
execution of site-specific startup command 
procedures, Part I, 5-4 
freeing dump information from page file, Part 
IT, 15-4 
in an emergency 
with default system parameters, Part I, 
4-7 
without startup and login procedures, Part 
I, 4-8 
without the UAF, Part I, 4-9 
installing images, Part I, 5-4; Part I, 16-10 
installing page and swap files, Part I, 5-4, 5-5; 
Part II, 15-5, 15-17, 15-18 
limiting the number of interactive users, Part 
I, 5-15 
LMF database, Part I, 5-5 
loading of device drivers, Part I, 5-4 
loading of licenses, Part I, 5-5 
loading of Product Authorization Keys (PAKs), 
Part I, 5-5 
location of files used in, Part I, 4—4 
logging with SYSMAN, Part J, 4-15 
making remote InfoServer devices available, 
Part II, 21-138 
making remote InfoServer disks available, Part 
I, 5-12 
managing with SYSMAN, Fart J, 5-16 
messages 
indicating execution of site-independent 
startup, Part I, 4-5 
indicating execution of site-specific startup, 
Part I, 4-5 
indicating lack of installed page file, Part 
I, 5-5 
mounting disk for page and swap files, Part I, 
5-5 
mounting the queue database disk, Part I, 
12-6 
order of events 
possibility of future change, Part I, 5-5 
performing site-specific operations, Part I, 5-9 
phases 


See Startup phases 
purging the operator log file, Part J, 5-13 
saving contents of system dump file, Part J, 
5-12; Part II, 15-13 
setting 
device characteristics in, Part I, 5-11 


System startup 
setting (cont'd) 
printer device characteristics, Part I, 7-12 
terminal device characteristics, Part I , 1-9 
setting up a LAT network, Part I, 5-14 
starting InfoServer Client for OpenVMS 
software, Part I, 5-12 
starting of system processes, Part I, 5-5 
starting queues, Part J, 5-11 
starting SMISERVER process, Part I, 5-5 
starting the DECnet network, Part I, 5-15 
starting the License Management facility 
(LMF), Part I, 5-5 
starting the queue manager, Part I, 12-3 
startup command procedures, Part I, 5-2 
startup of CONFIGURE process, Part I, 5-4 
submitting batch jobs, Part J, 5-13 
suppressing autoconfiguration, Part I, 5-7, 7-8 
tasks, Part I, 4-1 
VMS$PHASES.DAT database, Part I, 5-4 


System time 


see Time 
System tuning 
See Tuning 
System version 
registering images with dependencies on, Part 
I, 5-21 
System volumes 
definition, Part I, 8-8 
Systemwide logical names, Part I, 5-7 
SYSTEST account 
initial modification, Part I, 6-7 
in UAF, Part I, 6-8 
SYSUAF.DAT files, Part J, 6-1 
moving to reduce system disk I/O, Part II, 16-8 
SYSUAFALT.DAT file, Part I, 4-10 
SYSUAF logical name 
defining during system startup, Part I, 5-8 
defining to reduce system disk I/O, Part I, 
16-8 


T 


Tailoring a system disk 
with VMSTAILOR, Part I, 5-1 
Tailoring utility (VMSTAILOR), Part I, 5-1 
Tape commands 
DISMOUNT, Part I, 8-42 
MOUNT, Fart I, 8-18 
Tape files 
See also Tape file system 
accessing at file level, Part I, 9~13 
accessing for read and write operations, Part I, 
9-14 
append operation, Part I, 9-18 
closing after opening for read access, Part I, 
9-17 


Tape files (cont'd) 


closing after opening for write access, Part I, 
9-18 
copying, Part I, 9-22 
description, Part I, 8-8 
locating for read and write access, Part I, 9—15 
modifying characteristics, Part I, 9-9 
reading, Part I, 9-17 
update operation, Part I, 9-18 
writing to, Part I, 9-18 
Tape file system 
checking 
continuation volume, Part I, 8—40 
expiration date field, Part I, 9-18 
locating files, Part I, 9-15 
overwriting existing information, Part I, 9-18 
protection on, Part I, 8-19 
writing files to tape volume, Part I, 9-19 
Tapes 
See also Magnetic tapes 


See also Tape volumes 

access, Part I, 9-14 

allocating drive, Part I, 9-22 
allocating drives, Part I, 8-9 
basic concepts of, Part I, 8-6 
blocks, Part I, 8-6 

bpi, Part I, 8-6 

commands, Part I, 8-26 
copying files from, Part I, 9-22 
deallocating drives, Part I, 8-10 
dismounting, Part I, 10-15 
DOS-11, Part I, 9-24 

enabling write cache, Part I, 8—25 
file names, Part I, 9-16 


file protection 


See Protection 
files 

See Tape files 
file system, Part I, 8-8 
initializing, Part I, 10-12 
IRG (interrecord gap), Part I, 8-6 
label format, Part I, 8-24 
labeling, Part I, 10-20 
loading on drive, Part I, 9-22 
markers on, Part I, 8-6 
modifying device characteristics, Part I, 8-40 
mounting, Part I, 10-14 
MTACP process, Part I, 8-6 
reading from, Part I, 9-17 
record blocking, Part I, 8-7 

advantages, Part I, 8-7 
record size 

specifying, Part I, 8~25 
sequential organization of, Part I, 8-6 
specifying block size, Part I, 8-25 
standard-labeled 

mounting, Part I, 8-24 
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Tapes (cont’d) 
structure of, Part I, 8-6 
volume label 
overriding protection, Part I, 8-25 
volume protection 


See Protection 
volumes 

See also Disk volumes 

See also Tape volumes 


See also Volumes 
accessibility protection, Part I, 8-19 
copying files from, Part I, 9-22 
volume sets, Part I, 8-7 
write cache 
enabling, Part I, 8-25 
writing files to, Part I, 9-22 
Tape volumes, Part I, 9-23 
See also Tape files 
See also Tapes 
accessing files on, Part I, 9-13, 9-18 
access to, Part I, 9-14 
continuation, Part I, 8-37 
copying files 
from, Part I, 9-22 
to, Part I, 9-20 
to and from, Part I, 9-24 
deallocating, Part I, 9-23 
dismounting, Part I, 9-23 
file-structured, Part I, 8-20 
foreign, Part I, 8-20 
header labels, Part I, 8-25 
initializing, Part I, 9-22 
mounting, Part I, 8-21, 8-24, 8-27 
mounting volume sets, Part I, 8-35 
mounting with automatic switching disabled, 
Part I, 8-38 
mount verification, Part I, 8-56 
overriding UIC, Part I, 8-25 
private, Part I, 8-9 
reading attributes of header labels, Part J, 
9-18 
reading files on, Part I, 9-17 
searching for files on, Part I, 9-5 
specifying record size, Part I, 8-25 
standard-labeled, Part I, 9-22 
copying files from, Part I, 9-22 
wildcard characters supported, Part I, 9-16 
write-enabling, Part I, 8-28 
write-locking, Part I, 8-35 
write rings, Part I, 8-35 
writing files to, Part I, 9-22 
writing to files on, Part I, 9-18 
TAPE_MVTIMEOUT system parameter, Part J, 
8-58, 8-60 
TDF (time differential factor) 
See Time differential factor (TDF) 
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Template files 
for site-specific startup, Part I, 5-3 
Temporary working directory 
specifying alternate working device for, Part I, 
3-12 
Terminal queues, Part I, 13-3 
Terminals 
console, Part I, 2-18 
controlling access through system password, 
Part I, 11-3 
determining physical type, Part I, 7-11 
disconnecting without terminating a process, 
Part I, 7-10 
documenting owners of, Part I, 7-10 
for security alarms, Part I, 17-20 
keeping sessions on multiple, Part I, 7-10 
LAT, Part I, 7-11 
determining characteristics of, Part I, 7-11 
disconnecting, Part I, 7-10 
managing 
tasks for, Part I, 7-9 
operator 
See Operator terminals 
disabling, Part I, 2-21 
remote, Part I, 7-10 
SET TERMINAL/INQUIRE command, Part J, 
7-11 
setting characteristics, Part I, 7-9 
default values, Part I, 7-9 
in system startup, Part I, 5-11, 7-9 
virtual 
See Virtual terminals 
Terminal servers, Part II, 22-4 
defined, Part I, 22-1 
on OpenVMS system, Part I, 22-7 
Time 
See also Time differential factor (TDF) 
modifying system time, Part I, 19-17 
updating in a VMScluster, Part II, 19-18 
Time conversion service, Part I, 5-29 
Time differential factor (TDF) 
See also Time 
changing for daylight saving time, Part I, 5-30 
definition, Part I, 5-29 
map for determining, Part I, 5-30 
setting for your system, Part I, 5-29 
Timeouts 
in SYSMAN, Part I, 2-14 
mount verification OPCOM message, Part I, 
8-58 
Timer queue entry limit, Part I, 6—40 
Time zones 
setting up your system to compensate for, Part 
I, 5-29 
TP_SERVER process 
stopping the creation of, Part IT, 23-19 


TQELM process limit, Part I, 6-40 
Track 
definition, Part II, A-2 
Trailer labels 
on tape files, Part I, 8-8 
Trailer pages, Part I, 138-34 
file, Part I, 13-38 
job, Part I, 13-38 
Transaction logs 
changing the size of, Part II, 23-10 
checking the size of, Part II, 23-9 
creating, Part II, 23-4 
moving, Part IT, 23~—11 
planning the size of, Part II, 23-3 
planning where to put, Part IT, 23-4 
Transactions 
monitoring, Part II, 23-6 
Translation modes 
- card reader, Part I, 7-18 
Transmission speed 
setting for terminals, Part I, 7-9 
Transports, Part I, 21-5 
LASTport, Part I, 21-5 
Troubleshooting 
adding or deleting a device control library 
module, Part I, 13-84 
autostart queues, Part I, 13-82 
booting problems, Part I, 4-16 
general printer problems, Part I, 13-78 
holding jobs, Part I, 13-79 
if a device is not recognized by the system, 
Pari I, 7-6 
jobs that will not execute, Part I, 13-79 
jobs with characteristic mismatch, Part I, 
13-81 
OPCOM problems, Part I, 2-19 
pending jobs, Part I, 138-79 
print jobs with stock mismatch, Part I, 13-80 
problems deleting a queue, form, or 
characteristic, Part I, 13-82 
queue manager, Part I, 12-138 
queue problems, Part J, 18-78 
stalled output queue, Part I, 13-81 
startup problems, Part I, 4-14 
system dump file for, Part I, 15-11 
system failure, Part II, 15-11 
system hang, Part II, 15-14 
system startup problems, Part I, 4-15 
TT2$M_DISCONNECT characteristic 
enabling, Part I, 7-10 
relationship to TTY_DEFCHAR2 system 
parameter, Part I, 7-10 
setting up virtual terminals, Part I, 7-10 
TTDRIVER device driver 
loading, Part I, 7-10 
TTY_DECCHAR system parameter, Part I, 7-9 


TTY_DEFCHAR2 system parameter, Part I, 7-9, 
7-10 
relationship to TT2Y$M_DISCONNECT 
characteristic, Part I, 7-10 
setting up virtual terminals, Part I, 7-10 
Tuning 
See also Performance 
considering hardware capacity, Part I, 16-6 
definition, Part IJ, 16-4 
evaluating success, Part II, 16-6 
minimizing with AUTOGEN feedback, Part II, 
14-10 
predicting when required, Part II, 16-5 
with AUTOGEN, Part II, 14-5 
TYPE command 
tape, Part I, 9-17 


U 


UAFALTERNATE logical name, Part I, 4-10 
UAFALTERNATE system parameter, Part I, 4-10 
UAFs (user authorization files) 
booting with alternate, Part I, 4-9 
checking quotas for software installation, Part 
I, 3-5 
description of, Part I, 6-1 
general maintenance, Part I, 6—7 
initial contents, Part I, 6-8 
initial modification, Part I, 6-7 
listing records in, Part I, 6-21 
logical name defining location, Part I, 5-8 
login check, Part I, 6-6 
modifying 
user record, Part I, 6-20 
network proxy, Part I, 6-32 
records 
creating multiple default, Part I, 6-22 
resource limits for VAX and AXP, Part I, 6-36 
returning to the default, Part I, 4-10 
SYSMAN checks, Part I, 2-12 
SYSUAF.DAT, Part I, 6-1 
user priorities, Part I, 6-29 
UFD (user file directory) 
included in MFD, Part I, A-4 
UIC associated with, Part IJ, A-4 
UICs (user identification codes), Part I, 6-13 
default protection 
changing, Part I, 9-7 
directory protection, Part I, 9-12 
disk usage kept in quota file, Part IIT, A-9 
identifiers, Part I, 11-10 
interpreting, Part I, 11-7 
member number, Part I, 6—20 
overriding for tape volumes, Part I, 8-25 
protection 
of queues, Part I, 138-22 
public volumes, Part I, 8-15 
[0,0], Part I, 8-47 
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Update procedures 


See also Mandatory updates 
definition, Part I, 3-3 
for maintenance releases, Part I, 3-3 
restrictions, Part I, 3-3 
steps in, Part I, 3-3 
Upgrade procedures 
and system version dependent applications, 
Part I, 5-22 
definition, Part I, 3-3 
restrictions, Part I, 3-3 
steps in, Part I, 3-3 
using with existing OpenVMS, Part I, 3-2 
Usage count 
DIRECTORY/SIZE command, Part IJ, 8-47 
DISKQUOTA display, Part I, 8-47 
USE command 
in conversational boot, Part I, 4—7 
in SYSGEN, Part I, 14-31, 14-33 
User accounts 
changing quotas or privileges, Part I, 6-20 
deleting, Part I, 6-22 
disabling, Part I, 6-25 
listing records of, Part I, 6-21 
maintaining, Part I, 6-21 
modifying, Part I, 6-20 
restricting use, Part I, 6-25 
setting up, Part I, 6-8 
User authorization, Part I, 6-5 
User authorization files 
See UAFs 
User Environment Test Package 


See UETP 
User file directory 


See UFD 
User files 
on public volumes, Part I, 8-8 
placement, Part I, 8-9 
User Mail profile, Part I, 6-34 
User mode 
logical names, Part II, 16-14 
User names 
as identifiers, Part I, 11-10 
entering when logging in, Part I, 2-7 
User resources, Part I, 6-35 
Users 
interactive 
limiting number of, Part I, 5-15 
limiting the number of interactive, Part I, 
5-15; Part II, 16-4 
restricting login hours for, Part IT, 16-4 
sending messages to with OPCOM, Part I, 
2-19 
sending requests to an operator, Part I, 2—21 
validation of, Part I, 2—12 
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User-specified job retention 
changing, Part I, 138-74 


‘UTC$CONFIGURE_TDF.COM command 


procedure 
sample session, Part I, 5-32 
showing and setting your time differential 
factor (TDF), Part I, 5-30 
UTC (Coordinated Universal Time) service, Part 
I, 5-29 
compensating for differing time zones, Part I, 
5-29 


V 


Validation of users, Part I, 2-12 
VAXcluster environments 
See also VMScluster environments 
adjusting quorum after shutting down a node, 
Part I, 4-29 
defining the number of nodes for AUTOGEN, 
Part IT, 14-21 
shutting down an entire VAXcluster, Part J, 
4—29 
VAX systems 
downline loading, Part II, 21-2 
VAX Vector Instruction Emulation facility 


See VVIEF 
VAXVMSSYS.PAR file, Part I, 4-2; Part II, 14-3 
initializing parameters at boot time, Part II, 
14-36 
Vector capability 
determining availability within a system, Part 
IT, 24-9 
placing an ACL on, Part II, 24-8 
Vector consumer 
determining the identity of, Part IT, 24-9 
managing, Part II, 24-6 
marginal, Part II, 24—7 
obtaining information about, Part II, 24—8 
Vector context switch 
obtaining information about, Part II, 24—9 
Vector count registers, Part I, 24-4 
Vector CPU time 
obtaining information regarding process, Part 
IT, 24-9 
Vector length registers, Part II, 24-4 
Vector mask registers, Part II, 24-4 
Vector-present processors, Part II, 24—4 
adding to system, Part II, 24-5 
identifying, Part I, 24-9 
removing from system, Part II, 24-5 
when unavailable, Part II, 24—6 
Vector processing 
configuring system, Part IJ, 24-5 
definition, Part II, 24—4 
establishing batch queues for, Part I, 24-7 
managing, Part II, 24-5 


Vector processing (cont'd) 


obtaining information about, Part II, 24-8 
obtaining number of vector processors, Part II, 
24-9 
resource requirements, Part IJ, 24—7 
system performance, Part II, 24—4 
tasks for managing, Part II, 24-5 
tuning system, Part II, 24-7 
VAX support for, Part II, 24-4 
Vector registers, Part II, 24-4 
Vectors 
definition, Part IT, 24—4 
VECTOR_MARGIN system parameter, Part IJ, 
24-7 
VECTOR_PROC system parameter, Part II, 24-5 
Verification 
mount 
See Mount verification 
startup, Part I, 4-15 
turning on during system startup, Part I, 4-14 
Version checking 
for images, Part I, 5-22 
Version dependencies 
registering images, Part I, 5-21 
Version limits 
setting on files, Part I, 8-51 
Version numbers, Part I, 9-15 
Virtual devices 
mounting during system startup, Part II, 
21-13 
VIRTUALPAGECNT system parameter 
optimizing batch queues for Sort/Merge utility, 
Part I, 13-33 
Virtual terminals 
connecting, Part I, 7-10 
determining physical terminal type, Part I, 
7-11 
device name, Part I, 7-10 
enabling, Part I, 7-10 
purpose of, Part I, 7-10 
TT2$M_DISCONNECT characteristic, Part I, 
7-10 
TTY_DEFCHAR2 system parameter, Part I, 
7-10 
VMB.EXE file, Part I, 4-17 
role in boot process, Part I, 4—2 
VMS$LAYERED.DAT file, Part I, 5-18 
function in startup procedure, Part I, 5-17 
VMS$PHASES.DAT file 
in startup procedure, Part I, 5-4, 5-17 
VMS$VMS.DAT file 
in startup procedure, Part I, 5-17 
VMScluster environments . 
See also VAXcluster environments 
adjusting quorum after shutting down a node, 
Part I, 4-29 
autostart queues in, Pari I, 13-4 
benefits of, Part I, 19-2 


VMScluster environments (cont’d) 

common parameter files in, Part I, 14~22 

defining in SYSMAN, Part I, 2-12 

defining location of queue database files, Part 
I, 12-5 

device names in, Part I, 7-1 

disks in, Part I, 8-2 

dismounting a volume, Part I, 8-44 

dual-architecture 
installing images, Part IJ, 19-19 

executing commands in, Part I, 2-8 

generic batch queues in, Part I, 13-7 

generic output queues in, Part I, 13-12 

generic queues in, Part I, 13-2 

in network environment, Part II, 20—4 

limiting nodes that can run the queue manager, 
Part I, 12-9 

local and nonlocal, Part I, 2~12 

managing with SYSMAN, Part II, 19-16 to 
19-21 

monitoring with SHOW CLUSTER, Part II, 
19-4 

mounting volumes in, Part I, 8-21 

moving the queue manager to another node, 
Part I, 12-10 

node restriction for a startup command 
procedure, Part I, 5-18 

print and batch queues in, Part II, 19-2 

security, Part II, 19-16 

security audit log files in, Part IT, 17-21 

shared resources, Part II, 19-2 

shutting down an entire VMScluster, Part I, 
4-29 

specifying location of queue database, Part I, 
12-6 

specifying preferred order of queue manager 
nodes, Part I, 12-9 

SYSMAN management environment, Part I, 
2-9 

system management, Part II, 19-3 

using CLUSTER_CONFIG.COM, Part II, 19-2 

VMSINSTAL.COM command procedure 


See also Installation procedures 


See also Installing software 

Alternate System Root option, Part I, 3-15 
restriction, Part I, 3-15 

Alternate Working Device option, Part I, 3-12 

answer file, Part I, 3-11 

Autoanswer option, Part J, 3-11 

BACKUP qualifiers, Part I, 3-10 

command line syntax, Part I, 3-6 

completing installation, Part I, 3-11 

correcting problems, Part I, 3-6 

creating new answer file, Part I, 3-11 

destination parameter, Part I, 3~10 

File Log option, Part I, 3-14 

Get Save Set option, Part I, 3-10, 3-12 

getting help in, Part I, 3-6 
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VMSINSTAL.COM command procedure (cont'd) 
options, Part I, 3-11 
option list parameter, Part I, 3-9 
specifying, Part I, 3-9 
table of, Part I, 3-9 
overview, Part I, 3-4 
preparing to use, Part I, 3-4 
product list parameter, Part I, 3-6 
product save-set format, Part I, 3-13 
Release Notes option, Part I, 3-14 
saving answers, Part I, 3-11 
source parameter, Part I, 3-8 
starting, Part I, 3-6 
system failure 
conditions for, Part I, 3-15 
system shutdown following, Part I, 3-11 
temporary working directory 
specifying location of, Part I, 3-12 
VMSKITBLD.COM command procedure 
ADD option, Part I, 2-27 
BUILD option, Part I, 2-23 
compared to CLUSTER_CONFIG.COM 
command procedure, Part I, 2-27 
completing a system disk created with the 
BUILD option, Part I, 2-25 
configuring a system root added with, Part I, 
2-29 
copying system files from the system disk, Part 
I, 2-23 
COPY option, Part I, 2-26 
options, Part I, 2-23 
reliance on . TEMPLATE version of site-specific 
command procedures, Part I, 5-3 
VMSMAIL.DAT file 
moving to reduce system disk I/O, Part II, 16-8 
VMSMAIL logical name 
defining to reduce system disk I/O, Part II, 
16-8 
VMSMAIL_PROFILE.DATA file, Part I, 6-34 
VMSMAIL_PROFILE logical name 
defining during system startup, Part I, 5-8 
VMSTAILOR 
See Tailoring utility 
Volatile databases 
network, Part II, 20-8 
VOLPRO privilege, Part I, 8-13 
VOLSET:SYS file 
See Volume set list file 
Volume identifier field, Part I, 8-37 
Volume integrity, Part I, 8-56 
Volume labels 
assigning to devices, Part I, 5-10 
definition, Part I, 10-49 
specifying for magnetic tape, Part I, 10-18 
used with BACKUP command, Part I, 10-49 
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Volume protection 


See Protection, volume 


Volume Protection Override (VOLPRO) 


See VOLPRO privilege 


Volumes 


See also Disk volumes 
See also Private volumes 
See also Public volumes 
See also Tape volumes 
See also Volume sets 
adding to an existing disk set, Part I, 8-33 
advantages of using separate, Part I, 8-30 
availability 
OPCOM message, Part I, 8-57 
binding into volume set, Part I, 8-22 
canceling mount verification, Part I, 8-60 
continuation, Part I, 8-40 
controlling cache size, Part I, 8-56 
disabling mount messages, Part I, 8-24 
disk 
See Disk volumes 
dismounting, Part I, 8-41, 10-15 
restriction, Part II, 16-18 
Files—11, Part I, 8-3 
foreign 
copying files to and from, Part I, 9-24 
mounting, Part I, 8-21, 9-13 
group, Part I, 8-8 
initializing, Part I, 8-11, 10-12 
label format, Part I, 8-24 
mounting, Part I, 8-28, 10-14 
See also MOUNT command 
continuation tape, Part I, 8-38 
if device is unavailable, Part I, 8-27 
operator assistance, Part I, 8-18 
operator functions, Part I, 8-18 
public, Part I, 8-20 
steps, Part I, 8-27 
mount verification aborted 
OPCOM message, Part I, 8-61 . 
mount verification timeout, Part I, 8-58 
OPCOM message, Part I, 8-58 
operator-assisted mount, Part I, 8-28 
private, Part I, 8-9 
protection, Part I, 8-14 
public 
See Public volumes 
rebuilding, Part I, 8-48 
recovering from errors, Part I, 8-58 
sharing, Part I, 8-23 
substituting, Part I, 8-27 
system 
See System volumes 
tape 
See Tape volumes 


Volume security profile 


reserved file, Part II, A-9 
SECURITY.SYS, Part II, A-9 


Volume set list file 


description, Part I, A-9 

reserved file, Part II, A-9 

used by Analyze/Disk_Structure utility, Part 
II, A-9 

VOLSET.SYS, Part II, A-9 


Volume sets 


backing up, Part I, 10-38 
CD-ROM 
partially mounted ISO 9660, Part I, 8-34 
characteristics, Part I, 8-29 
creating, Part I, 8-22, 8-29 
definition, Part I, 8-29 
disk 
accessing, Part I, 8-30, 8-31 
adding to, Part I, 8-33 
adding volumes, Part I, 8-33 
assigning name to, Part I, 8-30 
creating, Part I, 8-30, 8-31 
from existing volumes, Part I, 8-32 
from new volumes, Pari I, 8-31 
creating files on, Part I, 8-31 
definition, Part I, 8-2 
directory structure, Part I, 8-30 
index file, Part I, 8-31 
mounting, Pari I, 8-30, 8-31, 8-32 
naming, Part I, 8-31 
information stored in VOLSET:SYS, Part II, 
A-9 
mounting, Part I, 8-380 
See also MOUNT command 
privileges to access, Part I, 8-31 
processing continuation volumes, Part I, 8-35 
restoring, Part I, 10-438 
restriction for system disk, Part I, 8-30 
root volume, Part I, 8-30 
tape, Part I, 8-7 
automatic volume switching, Part I, 8-37 
continuation volumes, Part I, 8-36 
creating, Part I, 8-35 
mounting, Part I, 8-35 
mounting continuation volumes, Part J, 
8-38 
mounting with automatic switching 
disabled, Part I, 8-38 


VVIEF$DEINSTAL.COM command procedure, 
Part II, 24-10 
VVIEF$INSTAL.COM command procedure, Part 
IT, 24-5, 24-10 
VVIEF (VAX Vector Instruction Emulation facility) 
definition, Part II, 24-5 
determining presence of, Part IJ, 24-9, 24-10 
loading, Part II, 24-10 
unloading, Part II, 24-10 
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Waiting job status, Part I, 13-70 
WANs (wide area networks) 
connections, Part I, 20-6 
multipoint, Part II, 20—7 
point-to-point, Part II, 20-7 
Welcome messages 
defining, Part I, 5-13 
login, Part I, 2-7 
Wide area networks (WANs) 
See WANs 
Wildcard characters 
Asterisk (*) 
using with tape volumes, Part J, 9-16 
in file names, Part I, 9-16 
with OpenVMS extended names, Part I, 9~16 
with standard names, Part I, 9-16 
with tape volumes, Part I, 9-16 
Working directory 
temporary 
in VMSINSTAL.COM, Part I, 3-12 
Working sets 
adjusting for vectorized applications, Part II, 
24-7 
default size, Part I, 6-40 
extent, Part I, 6-40 
limits and quotas 
choosing a value for batch queues, Part I, 
13-31, 13-32 
specifying for batch queues, Part I, 13-21, 
13-29 
specifying for output queues, Part I, 13-21 
quota, Part I, 6-40 
Work load 
adjusting system parameters for, Part I, 16-5 
distributing, Part II, 16-3 
designing efficient applications, Part II, 


Volume shadowing, Part I, 10-88, 10-43 16-4 
Volume structure restricting login hours, Part II, 16-4 
ISO 9660, Part I, 8-3 importance of knowing, Part II, 16-2 
Volume switching monitoring, Part II, 16-2 
automatic, Part I, 8-37 tools used for, Part II, 16-2 
VTAO device strategies for managing, Part II, 16-3 
connecting, Part I, 7-10 Workstations 
backing up, Part I, 10-34 
managing queues on, Part I, 13-2 
OPCOM behavior on, Part I, 2~18 
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Workstations (cont'd) XARs (extended attribute records) 
OPCOM startup on, Part I, 2-18, 2-19 protection fields, Part I, 8-17 


printer queue configuration, Part I, 13-8 mount option, Part I, 8-17 
setting up media on, Part I, 8-11 X terminal client, Part II, 21-4 
starting SMISERVER process, Part I, 2-9 
use of Snapshot facility with, Part I, 4-22 
World (security category), Part I, 11-7 
Writable images, Part II, 16-11 
Write access 
See Access types, write 
Writeboot utility (WRITEBOOT), Part I, 4-17 
error messages, Part I, 4-18 
Write cache 
enabling for tape device, Part I, 8-25 
Write-enabling a tape, Part I, 8-28 
Write-locked devices 
mount verification, Part I, 8-59 
Write-locking 
disk volumes, Part I, 8-58 
tape volumes, Part I, 8-35 
Write operation 
See Access types, write 
Write rings 
on tape volumes, Part I, 8-35 
WSDEFAULT process limit, Part I, 6-40 
choosing a value for batch queues, Part I, 


13-31 

specifying a value for batch queues, Part I, 
13-21, 138-29 

specifying a value for output queues, Part I, 
13-21 


WSEXTENT process limit, Part I, 6-40 
choosing a value for batch queues, Part I, 
13-31 
for efficient sorting, Part I, 13-32 
specifying a value for batch queues, Part I, 
13-22, 138-30 
specifying a value for output queues, Part I, 
138-22 
value for efficient backups, Part J, 10-9 
WSMAX system parameter, Part J, 13-31; Part 
IT, 24—7 
WSQUOTA process limit, Part I, 6-40 
choosing a value for batch queues, Part I, 


13-31 

specifying a value for batch queues, Part I, 
138-22, 13-30 

specifying a value for output queues, Part I, 
13-22 


value for efficient backups, Part I, 10-9 
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XAR keyword 
with MOUNT/PROTECTION command, Part I, 
8-23 


Index—62 


NOTES 


NOTES 


NOTES 


NOTES 


NOTES 


NOTES 


NOTES 


NOTES 


NOTES 


NOTES 


How to Order Additional Documentation 





Technical Support 
If you need help deciding which documentation best meets your needs, call 800-DIGITAL (800-344-4825) 
and press 2 for technical assistance. 


Electronic Orders 


If you wish to place an order through your account at the Electronic Store, dial 800-234-1998, using a 
modem set to 2400- or 9600-baud. You must be using a VT terminal or terminal emulator set at 8 bits, no 
parity. If you need assistance using the Electronic Store, call 800-DIGITAL (800-344-4825) and ask for an 
Electronic Store specialist. 


Telephone and Direct Mail Orders 


From 
U.S.A. 


Puerto Rico 


Canada 


International 


Internal Orders? 


(for software 
documentation) 


Internal Orders 
(for hardware 
documentation) 


Call 


DECdirect 

Phone: 800-DIGITAL 
(800-344-4825) 

FAX: (603) 884-5597 


Phone: (809) 781-0505 
FAX: (809) 749-8377 


Phone: 800-267-6215 
FAX: (613) 592-1946 


DTN: 241-3023 
(508) 874-3023 


DTN: 234-4325 
(508) 351-4325 
FAX: (508) 351-4467 


Write 


Digital Equipment Corporation 
P.O. Box CS2008 
Nashua, NH 03061 


Digital Equipment Caribbean, Inc. 
3 Digital Plaza, 1st Street 

Suite 200 

Metro Office Park 

San Juan, Puerto Rico 00920 


Digital Equipment of Canada Ltd. 
100 Herzberg Road 

Kanata, Ontario, Canada K2K 2A6 
Attn: DECdirect Sales 


Local Digital subsidiary or 
approved distributor 


Software Supply Business (SSB) 
Digital Equipment Corporation 
1 Digital Drive 

Westminster, MA 01473 


Publishing & Circulation Services 
Digital Equipment Corporation 
NR02-2 

444 Whitney Street 

Northboro, MA 01532 


1Call to request an Internal Software Order Form (EN-01740-07). 
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